a9acd3797702a324bc97bb07e48b56b876579013d3fe16035de1b71e1a0ecb8f | Triage

Sharing

General

Target

a9acd3797702a324bc97bb07e48b56b876579013d3fe16035de1b71e1a0ecb8f
Size

1.1MB
Sample

221127-qsy95aeg9y
MD5

b16ee4a2f47dc2a0cc6ea1af0b8201a1
SHA1

d5987032b57c3e203c642d0cce424ff14a82d700
SHA256

a9acd3797702a324bc97bb07e48b56b876579013d3fe16035de1b71e1a0ecb8f
SHA512

833f8d92ee83b1512942885e2dcd07e304479c3f1013febc988e92cbae0680743fa97668efde5167f96144c74b7b50693ffb6161d57b6bcf354678f0e6b4a825
SSDEEP

12288:bJ84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4C:bF7WXbqdUTmWK29ZY47EiLMYTHy

Score

7^/10

Malware Config

Targets

- Target
  
  a9acd3797702a324bc97bb07e48b56b876579013d3fe16035de1b71e1a0ecb8f
- Size
  
  1.1MB
- MD5
  
  b16ee4a2f47dc2a0cc6ea1af0b8201a1
- SHA1
  
  d5987032b57c3e203c642d0cce424ff14a82d700
- SHA256
  
  a9acd3797702a324bc97bb07e48b56b876579013d3fe16035de1b71e1a0ecb8f
- SHA512
  
  833f8d92ee83b1512942885e2dcd07e304479c3f1013febc988e92cbae0680743fa97668efde5167f96144c74b7b50693ffb6161d57b6bcf354678f0e6b4a825
- SSDEEP
  
  12288:bJ84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4C:bF7WXbqdUTmWK29ZY47EiLMYTHy
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2