05e125cd6e6306010a9a43a9a96e0c1675bfa97d7064249a40037a1454f47007 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05e125cd6e6306010a9a43a9a96e0c1675bfa97d7064249a40037a1454f47007
Size

1.1MB
Sample

221127-rswpnsdf89
MD5

bf1206a25d7f223f56d9f82878409f54
SHA1

79121c546ffa43ed7e67495827e7a66cf6c1f2e5
SHA256

05e125cd6e6306010a9a43a9a96e0c1675bfa97d7064249a40037a1454f47007
SHA512

cc16be12838d87684f1436746af33ea29e41a10be36520fc13c798635608fc0b3d4c8b3125bfaf0b30b4ea821ae7d319d888c43b6b58529d477840672e70da76
SSDEEP

24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:48fRbE2VolvZW

Score

7^/10

Malware Config

Targets

- Target
  
  05e125cd6e6306010a9a43a9a96e0c1675bfa97d7064249a40037a1454f47007
- Size
  
  1.1MB
- MD5
  
  bf1206a25d7f223f56d9f82878409f54
- SHA1
  
  79121c546ffa43ed7e67495827e7a66cf6c1f2e5
- SHA256
  
  05e125cd6e6306010a9a43a9a96e0c1675bfa97d7064249a40037a1454f47007
- SHA512
  
  cc16be12838d87684f1436746af33ea29e41a10be36520fc13c798635608fc0b3d4c8b3125bfaf0b30b4ea821ae7d319d888c43b6b58529d477840672e70da76
- SSDEEP
  
  24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:48fRbE2VolvZW
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2