ca2938a806801037ccdfcf23403f9073bd7c2d822d3c87f26ee1d1afa36d6134 | Triage

Sharing

General

Target

ca2938a806801037ccdfcf23403f9073bd7c2d822d3c87f26ee1d1afa36d6134
Size

1.1MB
Sample

221127-ql3nzaag75
MD5

60c734ada641dbfb93ea83d9ce28f3ac
SHA1

60935152ca71730e3b436efb63bda59c27ea7fd4
SHA256

ca2938a806801037ccdfcf23403f9073bd7c2d822d3c87f26ee1d1afa36d6134
SHA512

daf532a2443eb2e926a3553eade7fc6c9990433f7a5e6930108ecb5be7104ee628c1bfc9d951125718e5128fc14eb26753c04ba7d539612f35d2d4702a6b64c1
SSDEEP

12288:LJ84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4z:LF7WXbqdUTmWK29ZY47EiLMYTHyp

Score

7^/10

Malware Config

Targets

- Target
  
  ca2938a806801037ccdfcf23403f9073bd7c2d822d3c87f26ee1d1afa36d6134
- Size
  
  1.1MB
- MD5
  
  60c734ada641dbfb93ea83d9ce28f3ac
- SHA1
  
  60935152ca71730e3b436efb63bda59c27ea7fd4
- SHA256
  
  ca2938a806801037ccdfcf23403f9073bd7c2d822d3c87f26ee1d1afa36d6134
- SHA512
  
  daf532a2443eb2e926a3553eade7fc6c9990433f7a5e6930108ecb5be7104ee628c1bfc9d951125718e5128fc14eb26753c04ba7d539612f35d2d4702a6b64c1
- SSDEEP
  
  12288:LJ84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4z:LF7WXbqdUTmWK29ZY47EiLMYTHyp
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2