e7808e4cb8c764cec83abec720ef12d92c784608f57b3676f896ee69ca7b6e87 | Triage

Sharing

General

Target

e7808e4cb8c764cec83abec720ef12d92c784608f57b3676f896ee69ca7b6e87
Size

1.1MB
Sample

221127-qe2s4aac67
MD5

18bb603ffb368ea0818396ac2155a6be
SHA1

07d9bf726b501057c036a0ef2d2e8fad78772e9a
SHA256

e7808e4cb8c764cec83abec720ef12d92c784608f57b3676f896ee69ca7b6e87
SHA512

5c13425bcd63f07df866c9a4245320d69f97049859413bc348c44cfe9fb34602d6ae236de5c09473f387ad165260ece5e1e55e528e108b157c64a11b22ee54c1
SSDEEP

12288:bJ84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4Y:bF7WXbqdUTmWK29ZY47EiLMYTHyO

Score

7^/10

Malware Config

Targets

- Target
  
  e7808e4cb8c764cec83abec720ef12d92c784608f57b3676f896ee69ca7b6e87
- Size
  
  1.1MB
- MD5
  
  18bb603ffb368ea0818396ac2155a6be
- SHA1
  
  07d9bf726b501057c036a0ef2d2e8fad78772e9a
- SHA256
  
  e7808e4cb8c764cec83abec720ef12d92c784608f57b3676f896ee69ca7b6e87
- SHA512
  
  5c13425bcd63f07df866c9a4245320d69f97049859413bc348c44cfe9fb34602d6ae236de5c09473f387ad165260ece5e1e55e528e108b157c64a11b22ee54c1
- SSDEEP
  
  12288:bJ84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4Y:bF7WXbqdUTmWK29ZY47EiLMYTHyO
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2