c8c4a64207ba2b699f1a3b7bf1a06096e4b848e85b7223aaaeac64c0dc005abd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8c4a64207ba2b699f1a3b7bf1a06096e4b848e85b7223aaaeac64c0dc005abd
Size

1.1MB
Sample

221127-ql8j8aed3x
MD5

f41a3030efb22437f980db97693a76df
SHA1

197ef3018f2dee302f8d28f9d7beb8994c8775fd
SHA256

c8c4a64207ba2b699f1a3b7bf1a06096e4b848e85b7223aaaeac64c0dc005abd
SHA512

7619cdfca38f05590cf26ef4d07699c5af51782424b26cab7ee2e2d6048a6b32e9a35cd9eeb0bef07fc698761c1947fb5133071887f450868a626087f6596036
SSDEEP

12288:URecnV4R0MA7najOoalUAZZz6DyyWfiAAMu8GCJYkEno4CUdUKGNa4zLKY6iTcoO:UrEEVZuFW5hVJbEnoQ9VukiTdwaOb

Score

7^/10

Malware Config

Targets

- Target
  
  c8c4a64207ba2b699f1a3b7bf1a06096e4b848e85b7223aaaeac64c0dc005abd
- Size
  
  1.1MB
- MD5
  
  f41a3030efb22437f980db97693a76df
- SHA1
  
  197ef3018f2dee302f8d28f9d7beb8994c8775fd
- SHA256
  
  c8c4a64207ba2b699f1a3b7bf1a06096e4b848e85b7223aaaeac64c0dc005abd
- SHA512
  
  7619cdfca38f05590cf26ef4d07699c5af51782424b26cab7ee2e2d6048a6b32e9a35cd9eeb0bef07fc698761c1947fb5133071887f450868a626087f6596036
- SSDEEP
  
  12288:URecnV4R0MA7najOoalUAZZz6DyyWfiAAMu8GCJYkEno4CUdUKGNa4zLKY6iTcoO:UrEEVZuFW5hVJbEnoQ9VukiTdwaOb
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2