323cc490291a667e1d5936dea2c9637655bd0287ddf4d23f66210f8c41bc7941 | Triage

Sharing

General

Target

323cc490291a667e1d5936dea2c9637655bd0287ddf4d23f66210f8c41bc7941
Size

1.1MB
Sample

221127-xbbk3adh9z
MD5

b2cc2d977761af770d0fc3c1f7a085ad
SHA1

80fc0a46c85974f7e60813a3fc26dd809eef663c
SHA256

323cc490291a667e1d5936dea2c9637655bd0287ddf4d23f66210f8c41bc7941
SHA512

eece98e695313aa67ce2f8f486f4bf214f52230ff1795a9c4b1dccaac1d40d93cc4cc0f957d0d21d02b19bdd3967234f5aa2fb848320cb95d2e324dd2d997f47
SSDEEP

12288:+uklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHe:+3jl2WzbZL6gEAqEVmA7x6FAnc

Score

7^/10

Malware Config

Targets

- Target
  
  323cc490291a667e1d5936dea2c9637655bd0287ddf4d23f66210f8c41bc7941
- Size
  
  1.1MB
- MD5
  
  b2cc2d977761af770d0fc3c1f7a085ad
- SHA1
  
  80fc0a46c85974f7e60813a3fc26dd809eef663c
- SHA256
  
  323cc490291a667e1d5936dea2c9637655bd0287ddf4d23f66210f8c41bc7941
- SHA512
  
  eece98e695313aa67ce2f8f486f4bf214f52230ff1795a9c4b1dccaac1d40d93cc4cc0f957d0d21d02b19bdd3967234f5aa2fb848320cb95d2e324dd2d997f47
- SSDEEP
  
  12288:+uklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHe:+3jl2WzbZL6gEAqEVmA7x6FAnc
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2