ce9d9b1b395f017303df82c8e75e6c48c9314e39b2c0c5b93375c25f5a8f9908 | Triage

Sharing

General

Target

ce9d9b1b395f017303df82c8e75e6c48c9314e39b2c0c5b93375c25f5a8f9908
Size

1.1MB
Sample

221127-qk3ycaaf99
MD5

3261bd4155f779e07af1f30341b10f9d
SHA1

5db4dc19b5b7e57c8f557c14e1aa27065c872539
SHA256

ce9d9b1b395f017303df82c8e75e6c48c9314e39b2c0c5b93375c25f5a8f9908
SHA512

78aaa9c90fd7cd7a07406aa2c077691c48a91c690431d709b7186c088bf32e2e57437cc16894a87de13968fb79bbee3412558a64989f222e3f791ec335772540
SSDEEP

24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:48fRbE2VolvZW

Score

7^/10

Malware Config

Targets

- Target
  
  ce9d9b1b395f017303df82c8e75e6c48c9314e39b2c0c5b93375c25f5a8f9908
- Size
  
  1.1MB
- MD5
  
  3261bd4155f779e07af1f30341b10f9d
- SHA1
  
  5db4dc19b5b7e57c8f557c14e1aa27065c872539
- SHA256
  
  ce9d9b1b395f017303df82c8e75e6c48c9314e39b2c0c5b93375c25f5a8f9908
- SHA512
  
  78aaa9c90fd7cd7a07406aa2c077691c48a91c690431d709b7186c088bf32e2e57437cc16894a87de13968fb79bbee3412558a64989f222e3f791ec335772540
- SSDEEP
  
  24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:48fRbE2VolvZW
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2