5a5e1766ba7d4ae82091837e40bb5ad7da5a9f823f55e6ef912584ab6942f198 | Triage

Sharing

General

Target

5a5e1766ba7d4ae82091837e40bb5ad7da5a9f823f55e6ef912584ab6942f198
Size

1.1MB
Sample

221127-q9nvqagb2x
MD5

a8dadc583ec9082146705ee98e343666
SHA1

fa13f3d387b0f448627f55175ef47ddfab0973a6
SHA256

5a5e1766ba7d4ae82091837e40bb5ad7da5a9f823f55e6ef912584ab6942f198
SHA512

b6226db7259239d090ddf2c440be6a38a70d8e79ca43ccd098bfe832a285a9a3291eca7f03e753f5374c3c61c0411e75ff34bcee1ac0ef5a940e38278da61b02
SSDEEP

24576:o88FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:o8fRbE2VolvZW

Score

7^/10

Malware Config

Targets

- Target
  
  5a5e1766ba7d4ae82091837e40bb5ad7da5a9f823f55e6ef912584ab6942f198
- Size
  
  1.1MB
- MD5
  
  a8dadc583ec9082146705ee98e343666
- SHA1
  
  fa13f3d387b0f448627f55175ef47ddfab0973a6
- SHA256
  
  5a5e1766ba7d4ae82091837e40bb5ad7da5a9f823f55e6ef912584ab6942f198
- SHA512
  
  b6226db7259239d090ddf2c440be6a38a70d8e79ca43ccd098bfe832a285a9a3291eca7f03e753f5374c3c61c0411e75ff34bcee1ac0ef5a940e38278da61b02
- SSDEEP
  
  24576:o88FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:o8fRbE2VolvZW
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2