9ee3d02551d37d8b5505a8fdc6953f8360aea4fdaa7c66602348989231f7e50e | Triage

Sharing

General

Target

9ee3d02551d37d8b5505a8fdc6953f8360aea4fdaa7c66602348989231f7e50e
Size

1.1MB
Sample

221127-qvp48sfa3t
MD5

ea217960b9e4d347becf04a53d1a4394
SHA1

46a83730faee2aa6d400886cdf5e259c63ac240a
SHA256

9ee3d02551d37d8b5505a8fdc6953f8360aea4fdaa7c66602348989231f7e50e
SHA512

998ba7ceb558ebf7788703243c37a9496ab288fc79e4eac4d40011c9a034083fd8628d65fa5655337897499883d5394e4ed517778596e1454799597c490ade4f
SSDEEP

24576:o88FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:o8fRbE2VolvZW

Score

7^/10

Malware Config

Targets

- Target
  
  9ee3d02551d37d8b5505a8fdc6953f8360aea4fdaa7c66602348989231f7e50e
- Size
  
  1.1MB
- MD5
  
  ea217960b9e4d347becf04a53d1a4394
- SHA1
  
  46a83730faee2aa6d400886cdf5e259c63ac240a
- SHA256
  
  9ee3d02551d37d8b5505a8fdc6953f8360aea4fdaa7c66602348989231f7e50e
- SHA512
  
  998ba7ceb558ebf7788703243c37a9496ab288fc79e4eac4d40011c9a034083fd8628d65fa5655337897499883d5394e4ed517778596e1454799597c490ade4f
- SSDEEP
  
  24576:o88FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:o8fRbE2VolvZW
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2