0ea2a8dbbe8700744d2d9fdfd9e4ebcc0768672f1386901683bf3812daff9498 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ea2a8dbbe8700744d2d9fdfd9e4ebcc0768672f1386901683bf3812daff9498
Size

1.1MB
Sample

221127-rq56bshd2w
MD5

d7e543db50720008bf696d57382a9436
SHA1

63766549cf6eda798bd61078f1dac5d85dd743bb
SHA256

0ea2a8dbbe8700744d2d9fdfd9e4ebcc0768672f1386901683bf3812daff9498
SHA512

21be50609cbbc7c2418e5e8fa48c226753a28d624755cd0278d03607da7ef751426518d48304ceb2c19770e66d8b1100884df20e5f6ffa7a76ccc6b850c20793
SSDEEP

24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:48fRbE2VolvZW

Score

7^/10

Malware Config

Targets

- Target
  
  0ea2a8dbbe8700744d2d9fdfd9e4ebcc0768672f1386901683bf3812daff9498
- Size
  
  1.1MB
- MD5
  
  d7e543db50720008bf696d57382a9436
- SHA1
  
  63766549cf6eda798bd61078f1dac5d85dd743bb
- SHA256
  
  0ea2a8dbbe8700744d2d9fdfd9e4ebcc0768672f1386901683bf3812daff9498
- SHA512
  
  21be50609cbbc7c2418e5e8fa48c226753a28d624755cd0278d03607da7ef751426518d48304ceb2c19770e66d8b1100884df20e5f6ffa7a76ccc6b850c20793
- SSDEEP
  
  24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:48fRbE2VolvZW
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2