14fef617ebd69347a5e3bcfa42db4cbd8db2121b3f1ffc75fc3b82f105167561 | Triage

Sharing

General

Target

14fef617ebd69347a5e3bcfa42db4cbd8db2121b3f1ffc75fc3b82f105167561
Size

1.1MB
Sample

221127-rppryshc2z
MD5

3c02c71636a090ea909175c5248ae047
SHA1

2535f48c12c575bcfab676fe00c953c8dea59db7
SHA256

14fef617ebd69347a5e3bcfa42db4cbd8db2121b3f1ffc75fc3b82f105167561
SHA512

86062108310d11a16c34b1cd5be2f1e9137c2004121cd741cb2339def48a501c6af559868bdfbcf5851bf30e487090148c760b6ace606a07a36ee79c251a71bd
SSDEEP

24576:I88FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:I8fRbE2VolvZW

Score

7^/10

Malware Config

Targets

- Target
  
  14fef617ebd69347a5e3bcfa42db4cbd8db2121b3f1ffc75fc3b82f105167561
- Size
  
  1.1MB
- MD5
  
  3c02c71636a090ea909175c5248ae047
- SHA1
  
  2535f48c12c575bcfab676fe00c953c8dea59db7
- SHA256
  
  14fef617ebd69347a5e3bcfa42db4cbd8db2121b3f1ffc75fc3b82f105167561
- SHA512
  
  86062108310d11a16c34b1cd5be2f1e9137c2004121cd741cb2339def48a501c6af559868bdfbcf5851bf30e487090148c760b6ace606a07a36ee79c251a71bd
- SSDEEP
  
  24576:I88FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:I8fRbE2VolvZW
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2