a72402c12a437be181432fbc22ee6a74bf09a9761d1150bbc6c4c1cb40e85f2e | Triage

Sharing

General

Target

a72402c12a437be181432fbc22ee6a74bf09a9761d1150bbc6c4c1cb40e85f2e
Size

133KB
Sample

221129-edqtnacd95
MD5

8147ce9a4d55e8c135f920f8674f916f
SHA1

8cfa4969f5f80f3be49cdf11b5b7927bcad9ac98
SHA256

a72402c12a437be181432fbc22ee6a74bf09a9761d1150bbc6c4c1cb40e85f2e
SHA512

35d1ab080033b78b23abf19166361ccb50eaf727b28711c527c97af1bda39f97746618736e1de2b30e6b914a9fa2caac7c6dfdc39b4a3a73940c8cff8c30e831
SSDEEP

3072:JCWLr4MIChNnHLbPEII7zW6eojPhx2T+R2gwdNnicFMLQPyk4gSwAJ:JVPAWLDx6h0zrniqEQqk4nLJ

Score

7^/10

Malware Config

Targets

- Target
  
  a72402c12a437be181432fbc22ee6a74bf09a9761d1150bbc6c4c1cb40e85f2e
- Size
  
  133KB
- MD5
  
  8147ce9a4d55e8c135f920f8674f916f
- SHA1
  
  8cfa4969f5f80f3be49cdf11b5b7927bcad9ac98
- SHA256
  
  a72402c12a437be181432fbc22ee6a74bf09a9761d1150bbc6c4c1cb40e85f2e
- SHA512
  
  35d1ab080033b78b23abf19166361ccb50eaf727b28711c527c97af1bda39f97746618736e1de2b30e6b914a9fa2caac7c6dfdc39b4a3a73940c8cff8c30e831
- SSDEEP
  
  3072:JCWLr4MIChNnHLbPEII7zW6eojPhx2T+R2gwdNnicFMLQPyk4gSwAJ:JVPAWLDx6h0zrniqEQqk4nLJ
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Deletes itself
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2