d51a58eae8e6ba5e63e215bd47f562a1dc731f21cf098e70c41b4c88877277ee | Triage

Sharing

General

Target

d51a58eae8e6ba5e63e215bd47f562a1dc731f21cf098e70c41b4c88877277ee
Size

1.1MB
Sample

221127-qjn3ssae93
MD5

2b6992e4dfd848adc3a9dbb6b690d043
SHA1

e4445c08c3b7a04fa79d16201ab0a222d714ef63
SHA256

d51a58eae8e6ba5e63e215bd47f562a1dc731f21cf098e70c41b4c88877277ee
SHA512

10f4a19cd643bf7bd8a13f2fb1c7fc36bedb5664ad7a5880069934fce0534ff2ed8be261c61211136cc40ecb419b6121d9dccc7b1ba761d364a35b3f798abe64
SSDEEP

12288:6KptCjLyu+cUhZTD4nkDEjK63vOR9h1N9GbFIMBQH1x3l+YYZT6kouuiap+34dzu:6zSSU3/Yg9h1TGqjnVkPliTzu

Score

7^/10

Malware Config

Targets

- Target
  
  d51a58eae8e6ba5e63e215bd47f562a1dc731f21cf098e70c41b4c88877277ee
- Size
  
  1.1MB
- MD5
  
  2b6992e4dfd848adc3a9dbb6b690d043
- SHA1
  
  e4445c08c3b7a04fa79d16201ab0a222d714ef63
- SHA256
  
  d51a58eae8e6ba5e63e215bd47f562a1dc731f21cf098e70c41b4c88877277ee
- SHA512
  
  10f4a19cd643bf7bd8a13f2fb1c7fc36bedb5664ad7a5880069934fce0534ff2ed8be261c61211136cc40ecb419b6121d9dccc7b1ba761d364a35b3f798abe64
- SSDEEP
  
  12288:6KptCjLyu+cUhZTD4nkDEjK63vOR9h1N9GbFIMBQH1x3l+YYZT6kouuiap+34dzu:6zSSU3/Yg9h1TGqjnVkPliTzu
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2