4fa4f35836409e90f8269367ff3d71266cab89cc293259f46a38de69bef6eb0b | Triage

Sharing

General

Target

4fa4f35836409e90f8269367ff3d71266cab89cc293259f46a38de69bef6eb0b
Size

1.1MB
Sample

221127-rbmensgc5y
MD5

3703c22add60c348014530650e86a0cb
SHA1

eaf1a64d1fd973052e5d8e6fa2374e851e726112
SHA256

4fa4f35836409e90f8269367ff3d71266cab89cc293259f46a38de69bef6eb0b
SHA512

770035a56781bed7d5e26041badc65c1b374e72cb3cc4f70ceb583475a7bbadd51e2229fbeef35a0a228ca334fb63c4bd41dccec53b39c70c1c873d0ecdb63c1
SSDEEP

12288:bJ84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4k:bF7WXbqdUTmWK29ZY47EiLMYTHyu

Score

7^/10

Malware Config

Targets

- Target
  
  4fa4f35836409e90f8269367ff3d71266cab89cc293259f46a38de69bef6eb0b
- Size
  
  1.1MB
- MD5
  
  3703c22add60c348014530650e86a0cb
- SHA1
  
  eaf1a64d1fd973052e5d8e6fa2374e851e726112
- SHA256
  
  4fa4f35836409e90f8269367ff3d71266cab89cc293259f46a38de69bef6eb0b
- SHA512
  
  770035a56781bed7d5e26041badc65c1b374e72cb3cc4f70ceb583475a7bbadd51e2229fbeef35a0a228ca334fb63c4bd41dccec53b39c70c1c873d0ecdb63c1
- SSDEEP
  
  12288:bJ84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4k:bF7WXbqdUTmWK29ZY47EiLMYTHyu
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2