c68c7cd4eed48a3fe9f6b6ef7524138556ced8a03d07001f6bb7163be4a416f8 | Triage

Sharing

General

Target

c68c7cd4eed48a3fe9f6b6ef7524138556ced8a03d07001f6bb7163be4a416f8
Size

1.1MB
Sample

221127-qmvpraed6y
MD5

b5bfee7e0d761cc07bcf28de3b812190
SHA1

1f10e5fc71355680d98db35558eb1aa662e4f704
SHA256

c68c7cd4eed48a3fe9f6b6ef7524138556ced8a03d07001f6bb7163be4a416f8
SHA512

290b71382aaaecbaa153063f0067fbe3dfa40e1ecaea75a8fdd5018793d367c263a8503c23fb7f70347cab608b3b0ff875747e6f276a40c4cc54a96d935daefc
SSDEEP

24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wWC:48fRbE2VolvZWC

Score

7^/10

Malware Config

Targets

- Target
  
  c68c7cd4eed48a3fe9f6b6ef7524138556ced8a03d07001f6bb7163be4a416f8
- Size
  
  1.1MB
- MD5
  
  b5bfee7e0d761cc07bcf28de3b812190
- SHA1
  
  1f10e5fc71355680d98db35558eb1aa662e4f704
- SHA256
  
  c68c7cd4eed48a3fe9f6b6ef7524138556ced8a03d07001f6bb7163be4a416f8
- SHA512
  
  290b71382aaaecbaa153063f0067fbe3dfa40e1ecaea75a8fdd5018793d367c263a8503c23fb7f70347cab608b3b0ff875747e6f276a40c4cc54a96d935daefc
- SSDEEP
  
  24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wWC:48fRbE2VolvZWC
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2