9e0eb12c0b26cd1ea50931549c8dbdcf8b49f3091ca9fd3544c964b90c601bd1 | Triage

Sharing

General

Target

9e0eb12c0b26cd1ea50931549c8dbdcf8b49f3091ca9fd3544c964b90c601bd1
Size

1.0MB
Sample

221127-qvznnsbd63
MD5

185af92f0ad25665446b80b8b8a644ad
SHA1

22b43b48b2350ff509f02075bb386cf28f5075a1
SHA256

9e0eb12c0b26cd1ea50931549c8dbdcf8b49f3091ca9fd3544c964b90c601bd1
SHA512

70ffa548fd19f6c12a945a83546d4a0d024ccff5502dca8f721061a7e950b6bfd683d00196a6dbbb4bed8f64a241a343142db97e324bafefc31487ea50893839
SSDEEP

24576:plcZbTZvSDFbC+IX0RFLlVeUXHPwPzwIRm0m+b+s:ploGF5EUXHP8Lb+s

Score

7^/10

Malware Config

Targets

- Target
  
  9e0eb12c0b26cd1ea50931549c8dbdcf8b49f3091ca9fd3544c964b90c601bd1
- Size
  
  1.0MB
- MD5
  
  185af92f0ad25665446b80b8b8a644ad
- SHA1
  
  22b43b48b2350ff509f02075bb386cf28f5075a1
- SHA256
  
  9e0eb12c0b26cd1ea50931549c8dbdcf8b49f3091ca9fd3544c964b90c601bd1
- SHA512
  
  70ffa548fd19f6c12a945a83546d4a0d024ccff5502dca8f721061a7e950b6bfd683d00196a6dbbb4bed8f64a241a343142db97e324bafefc31487ea50893839
- SSDEEP
  
  24576:plcZbTZvSDFbC+IX0RFLlVeUXHPwPzwIRm0m+b+s:ploGF5EUXHP8Lb+s
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2