5cc99798f826c3df02557978034125318bdd11e651103909dd0d3103704ee3d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cc99798f826c3df02557978034125318bdd11e651103909dd0d3103704ee3d8
Size

1.1MB
Sample

221127-ytv8vsee89
MD5

8f42ec26ff1d7b6781a8145c25a92442
SHA1

b5cc032248477be56c882fecc3577f99b37aa611
SHA256

5cc99798f826c3df02557978034125318bdd11e651103909dd0d3103704ee3d8
SHA512

c04669f15fbfafff3e3feba26f023de7b481d1dd18c523354e01b489dcab70a6b36a540ac8f37f893763f346d3c8ba3df4bd546ea96b91a43cb4bcb82af933f9
SSDEEP

24576:GcHxMyocT1N8RyqWaCoyW//dURpweXTQT1y:GcRMyj8RyqWDWXiw2Qc

Score

7^/10

Malware Config

Targets

- Target
  
  5cc99798f826c3df02557978034125318bdd11e651103909dd0d3103704ee3d8
- Size
  
  1.1MB
- MD5
  
  8f42ec26ff1d7b6781a8145c25a92442
- SHA1
  
  b5cc032248477be56c882fecc3577f99b37aa611
- SHA256
  
  5cc99798f826c3df02557978034125318bdd11e651103909dd0d3103704ee3d8
- SHA512
  
  c04669f15fbfafff3e3feba26f023de7b481d1dd18c523354e01b489dcab70a6b36a540ac8f37f893763f346d3c8ba3df4bd546ea96b91a43cb4bcb82af933f9
- SSDEEP
  
  24576:GcHxMyocT1N8RyqWaCoyW//dURpweXTQT1y:GcRMyj8RyqWDWXiw2Qc
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2