85c8affd1480ed19effa281d839cf63c01021876e9b81e8e0d4922db5b325e72 | Triage

Sharing

General

Target

85c8affd1480ed19effa281d839cf63c01021876e9b81e8e0d4922db5b325e72
Size

1.1MB
Sample

221127-qz1frsfd2x
MD5

38e576e63bca8d889a362a473c4bad8c
SHA1

095a26f2a0fadfae40a8268b4f6ef014f37527f3
SHA256

85c8affd1480ed19effa281d839cf63c01021876e9b81e8e0d4922db5b325e72
SHA512

f7bb9cfb793eb52065e89a71c64a360a061c87c1dd9afede7fc6e1d283fb3950c22b6df95ea24c6b9e78854724a0f6f3c00afda4710f32fdafe4db561afab897
SSDEEP

24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:48fRbE2VolvZW

Score

7^/10

Malware Config

Targets

- Target
  
  85c8affd1480ed19effa281d839cf63c01021876e9b81e8e0d4922db5b325e72
- Size
  
  1.1MB
- MD5
  
  38e576e63bca8d889a362a473c4bad8c
- SHA1
  
  095a26f2a0fadfae40a8268b4f6ef014f37527f3
- SHA256
  
  85c8affd1480ed19effa281d839cf63c01021876e9b81e8e0d4922db5b325e72
- SHA512
  
  f7bb9cfb793eb52065e89a71c64a360a061c87c1dd9afede7fc6e1d283fb3950c22b6df95ea24c6b9e78854724a0f6f3c00afda4710f32fdafe4db561afab897
- SSDEEP
  
  24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:48fRbE2VolvZW
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2