120a6189e5400f8556aaa6bc319ad667089a2011804c6fb0ad3965e757765666 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

120a6189e5400f8556aaa6bc319ad667089a2011804c6fb0ad3965e757765666
Size

1.1MB
Sample

221127-rp86lahc51
MD5

ad535ee8a454bc84bfd7290013379d62
SHA1

e000d054876fd59f79d0dc4e3a92a0f88666fe21
SHA256

120a6189e5400f8556aaa6bc319ad667089a2011804c6fb0ad3965e757765666
SHA512

da98615797546d63e21ebac77b93b36a1f416b7213f6213e7b5df8c18f1cbf6827ad94e9141a9d7627d48bf58053e19bed5d319fdb1d6224acd080d3b1c5d272
SSDEEP

24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:48fRbE2VolvZW

Score

7^/10

Malware Config

Targets

- Target
  
  120a6189e5400f8556aaa6bc319ad667089a2011804c6fb0ad3965e757765666
- Size
  
  1.1MB
- MD5
  
  ad535ee8a454bc84bfd7290013379d62
- SHA1
  
  e000d054876fd59f79d0dc4e3a92a0f88666fe21
- SHA256
  
  120a6189e5400f8556aaa6bc319ad667089a2011804c6fb0ad3965e757765666
- SHA512
  
  da98615797546d63e21ebac77b93b36a1f416b7213f6213e7b5df8c18f1cbf6827ad94e9141a9d7627d48bf58053e19bed5d319fdb1d6224acd080d3b1c5d272
- SSDEEP
  
  24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:48fRbE2VolvZW
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2