d1cada1a54de3d532620b8548c42a7df4c4f5db09f0068944e3dd9b805182235 | Triage

Sharing

General

Target

d1cada1a54de3d532620b8548c42a7df4c4f5db09f0068944e3dd9b805182235
Size

1.1MB
Sample

221127-qkhx6sec31
MD5

705a5b41bf7d42fb8fb2a27c82acee74
SHA1

fac18e9eb1abcc11b54a32219a1f97b9eb299248
SHA256

d1cada1a54de3d532620b8548c42a7df4c4f5db09f0068944e3dd9b805182235
SHA512

ce3eeb16a835c4f98b2ac597fe0ae8caf197f7821608ed052375ef37b0f36dc53d566c3b474aa46740527e6938f3399497f1d14c6221d09e51a6c4aa826c4d99
SSDEEP

12288:LJ84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4a:LF7WXbqdUTmWK29ZY47EiLMYTHys

Score

7^/10

Malware Config

Targets

- Target
  
  d1cada1a54de3d532620b8548c42a7df4c4f5db09f0068944e3dd9b805182235
- Size
  
  1.1MB
- MD5
  
  705a5b41bf7d42fb8fb2a27c82acee74
- SHA1
  
  fac18e9eb1abcc11b54a32219a1f97b9eb299248
- SHA256
  
  d1cada1a54de3d532620b8548c42a7df4c4f5db09f0068944e3dd9b805182235
- SHA512
  
  ce3eeb16a835c4f98b2ac597fe0ae8caf197f7821608ed052375ef37b0f36dc53d566c3b474aa46740527e6938f3399497f1d14c6221d09e51a6c4aa826c4d99
- SSDEEP
  
  12288:LJ84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4a:LF7WXbqdUTmWK29ZY47EiLMYTHys
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2