988ebe8b935d7e61db9478bfbba25b89946229f35f54d4767ac34f1fef2c1072 | Triage

Sharing

General

Target

988ebe8b935d7e61db9478bfbba25b89946229f35f54d4767ac34f1fef2c1072
Size

1.1MB
Sample

221127-qwy4jabe27
MD5

b322646ef6519af03f2798a33d8c4ae1
SHA1

7584371d86384b4bec681071d3202c5608e084cb
SHA256

988ebe8b935d7e61db9478bfbba25b89946229f35f54d4767ac34f1fef2c1072
SHA512

b0c0f0ab2ba354ce77c10db418328424289bd1f4c8e10e33d525a9ebb1b52ad027bdebdaf6bcdfa407fdda9f89c2b5dadbc442f9f09596d9836414e3685c4760
SSDEEP

12288:LJ84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4M:LF7WXbqdUTmWK29ZY47EiLMYTHyu

Score

7^/10

Malware Config

Targets

- Target
  
  988ebe8b935d7e61db9478bfbba25b89946229f35f54d4767ac34f1fef2c1072
- Size
  
  1.1MB
- MD5
  
  b322646ef6519af03f2798a33d8c4ae1
- SHA1
  
  7584371d86384b4bec681071d3202c5608e084cb
- SHA256
  
  988ebe8b935d7e61db9478bfbba25b89946229f35f54d4767ac34f1fef2c1072
- SHA512
  
  b0c0f0ab2ba354ce77c10db418328424289bd1f4c8e10e33d525a9ebb1b52ad027bdebdaf6bcdfa407fdda9f89c2b5dadbc442f9f09596d9836414e3685c4760
- SSDEEP
  
  12288:LJ84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4M:LF7WXbqdUTmWK29ZY47EiLMYTHyu
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2