c3f8b9d3b19899d3216b820412c2d8d9fc03f66e74c25d658e432ecf59f22546 | Triage

Sharing

General

Target

c3f8b9d3b19899d3216b820412c2d8d9fc03f66e74c25d658e432ecf59f22546
Size

1.1MB
Sample

221127-qm9tnsah46
MD5

65a6f2852dacdf3d25c11f270c66cd32
SHA1

05f633a8c1387c0d34c0029c7ef5496772ce465b
SHA256

c3f8b9d3b19899d3216b820412c2d8d9fc03f66e74c25d658e432ecf59f22546
SHA512

196110598f061b3f52c740709014efdbd42572534224c02339cf55f9bacde155d9536d07c1ef8b10136141129396f556c8da4916759ea4028a940db257d1a52b
SSDEEP

24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wWD:48fRbE2VolvZWD

Score

7^/10

Malware Config

Targets

- Target
  
  c3f8b9d3b19899d3216b820412c2d8d9fc03f66e74c25d658e432ecf59f22546
- Size
  
  1.1MB
- MD5
  
  65a6f2852dacdf3d25c11f270c66cd32
- SHA1
  
  05f633a8c1387c0d34c0029c7ef5496772ce465b
- SHA256
  
  c3f8b9d3b19899d3216b820412c2d8d9fc03f66e74c25d658e432ecf59f22546
- SHA512
  
  196110598f061b3f52c740709014efdbd42572534224c02339cf55f9bacde155d9536d07c1ef8b10136141129396f556c8da4916759ea4028a940db257d1a52b
- SSDEEP
  
  24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wWD:48fRbE2VolvZWD
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2