fe5c28f3a0632e6887ad34e4257a3ee5ef9ec170f0f9fd988f5440afa1094280 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe5c28f3a0632e6887ad34e4257a3ee5ef9ec170f0f9fd988f5440afa1094280
Size

1.0MB
Sample

221127-qa7tjsdf2s
MD5

1fd79cbce54009b4b36b37878455ee94
SHA1

7865ce8d6f1847ee184455dc44573073ab3af3cd
SHA256

fe5c28f3a0632e6887ad34e4257a3ee5ef9ec170f0f9fd988f5440afa1094280
SHA512

65d0ccfc55cd8abf2253b348bd47f212d47cea3b882284cb760945e4cb6c04b1ca3d1e0f552ffae589815a4857811238e1c81b25569580c18f1a50ac02ec03a2
SSDEEP

24576:A0BfZ15Scs4mUj79qPiqn7yauT/asgd0tp8A4:A0guUuT/asgUU

Score

7^/10

Malware Config

Targets

- Target
  
  fe5c28f3a0632e6887ad34e4257a3ee5ef9ec170f0f9fd988f5440afa1094280
- Size
  
  1.0MB
- MD5
  
  1fd79cbce54009b4b36b37878455ee94
- SHA1
  
  7865ce8d6f1847ee184455dc44573073ab3af3cd
- SHA256
  
  fe5c28f3a0632e6887ad34e4257a3ee5ef9ec170f0f9fd988f5440afa1094280
- SHA512
  
  65d0ccfc55cd8abf2253b348bd47f212d47cea3b882284cb760945e4cb6c04b1ca3d1e0f552ffae589815a4857811238e1c81b25569580c18f1a50ac02ec03a2
- SSDEEP
  
  24576:A0BfZ15Scs4mUj79qPiqn7yauT/asgd0tp8A4:A0guUuT/asgUU
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2