ce6a1aa720692ae60ffb7128d80b9b31f691c756bdd4efc7750981702e174e44 | Triage

Sharing

General

Target

ce6a1aa720692ae60ffb7128d80b9b31f691c756bdd4efc7750981702e174e44
Size

1.1MB
Sample

221127-qk6dgaag27
MD5

155a1d495cbffb6f6313be944b7c8c32
SHA1

b44bb4d5383a8b9f59387cd202e77fcd7d633e64
SHA256

ce6a1aa720692ae60ffb7128d80b9b31f691c756bdd4efc7750981702e174e44
SHA512

1c286951368df0e227e18d4339de69593a9d60672aa41ce34ee0538477f2f985f235e8d3271cf8092528a13559e20b5bf765bd701d4ba1d404fdd4bcb6ee5cfd
SSDEEP

12288:/KptCjLyu+cUhZTD4nkDEjK63vOR9h1N9GbFIMBQH1x3l+YYZT6kouuiap+34dzw:/zSSU3/Yg9h1TGqjnVkPliTz

Score

7^/10

Malware Config

Targets

- Target
  
  ce6a1aa720692ae60ffb7128d80b9b31f691c756bdd4efc7750981702e174e44
- Size
  
  1.1MB
- MD5
  
  155a1d495cbffb6f6313be944b7c8c32
- SHA1
  
  b44bb4d5383a8b9f59387cd202e77fcd7d633e64
- SHA256
  
  ce6a1aa720692ae60ffb7128d80b9b31f691c756bdd4efc7750981702e174e44
- SHA512
  
  1c286951368df0e227e18d4339de69593a9d60672aa41ce34ee0538477f2f985f235e8d3271cf8092528a13559e20b5bf765bd701d4ba1d404fdd4bcb6ee5cfd
- SSDEEP
  
  12288:/KptCjLyu+cUhZTD4nkDEjK63vOR9h1N9GbFIMBQH1x3l+YYZT6kouuiap+34dzw:/zSSU3/Yg9h1TGqjnVkPliTz
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2