110ca03dbc6bc55fd12fd19878afa2e1809b682f988840b6d7fd68205f134733 | Triage

Sharing

General

Target

110ca03dbc6bc55fd12fd19878afa2e1809b682f988840b6d7fd68205f134733
Size

1.1MB
Sample

221127-rqey5sde52
MD5

e21aef4d0f02df82c6ee2b47894fb68b
SHA1

cf37ad8a37da5d18bf25ebe24957b1ed9530d0cf
SHA256

110ca03dbc6bc55fd12fd19878afa2e1809b682f988840b6d7fd68205f134733
SHA512

bc41f30bcf493a82f0fbcda0c522beaae071ce804fe0aecaa4b8447c0da70e58e9f0a4913b9c6f70eede3e0f2e97db236f3730ddc769115e27ce65ea5407c076
SSDEEP

12288:fKptCjLyu+cUhZTD4nkDEjK63vOR9h1N9GbFIMBQH1x3l+YYZT6kouuiap+34dzJ:fzSSU3/Yg9h1TGqjnVkPliTzJ

Score

7^/10

Malware Config

Targets

- Target
  
  110ca03dbc6bc55fd12fd19878afa2e1809b682f988840b6d7fd68205f134733
- Size
  
  1.1MB
- MD5
  
  e21aef4d0f02df82c6ee2b47894fb68b
- SHA1
  
  cf37ad8a37da5d18bf25ebe24957b1ed9530d0cf
- SHA256
  
  110ca03dbc6bc55fd12fd19878afa2e1809b682f988840b6d7fd68205f134733
- SHA512
  
  bc41f30bcf493a82f0fbcda0c522beaae071ce804fe0aecaa4b8447c0da70e58e9f0a4913b9c6f70eede3e0f2e97db236f3730ddc769115e27ce65ea5407c076
- SSDEEP
  
  12288:fKptCjLyu+cUhZTD4nkDEjK63vOR9h1N9GbFIMBQH1x3l+YYZT6kouuiap+34dzJ:fzSSU3/Yg9h1TGqjnVkPliTzJ
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2