da8adad19db2f7ea60c623c6b3e6c341ba4195873af20043d9cee148d28effd9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da8adad19db2f7ea60c623c6b3e6c341ba4195873af20043d9cee148d28effd9
Size

1.1MB
Sample

221127-qhcy5sae24
MD5

5a7022da2dd880b9636f55bc692b7289
SHA1

751ad9d71cb4bfb002c64a7e3b8369ed28094428
SHA256

da8adad19db2f7ea60c623c6b3e6c341ba4195873af20043d9cee148d28effd9
SHA512

cc58b8d942d45436163ff9ff73a2eeb43580a247cbcae3ffcff1b9728c5e2620e96f4babe25bb78790651bae4a0aa65a64021a2ed653399beb8dcf11f4e53425
SSDEEP

24576:Y88FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wWO:Y8fRbE2VolvZWO

Score

7^/10

Malware Config

Targets

- Target
  
  da8adad19db2f7ea60c623c6b3e6c341ba4195873af20043d9cee148d28effd9
- Size
  
  1.1MB
- MD5
  
  5a7022da2dd880b9636f55bc692b7289
- SHA1
  
  751ad9d71cb4bfb002c64a7e3b8369ed28094428
- SHA256
  
  da8adad19db2f7ea60c623c6b3e6c341ba4195873af20043d9cee148d28effd9
- SHA512
  
  cc58b8d942d45436163ff9ff73a2eeb43580a247cbcae3ffcff1b9728c5e2620e96f4babe25bb78790651bae4a0aa65a64021a2ed653399beb8dcf11f4e53425
- SSDEEP
  
  24576:Y88FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wWO:Y8fRbE2VolvZWO
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2