a0c4a8b7cc910a666dc4f823767fef26541038f773d68df175e49133ee837810 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0c4a8b7cc910a666dc4f823767fef26541038f773d68df175e49133ee837810
Size

135KB
Sample

221129-ez4yeahd8v
MD5

58cb195e821612a6186d914b3b031210
SHA1

c939bb911fd0d7c9c8e745134e0e3188bb7c93e3
SHA256

a0c4a8b7cc910a666dc4f823767fef26541038f773d68df175e49133ee837810
SHA512

6172e426601235fd9cd1c3a169fce0d971189c109a92feaf246bf5737e4c984d65e528f746c042e08434afff030c4e0ea19cc69f6f153a5d5a2e28eafbd3985e
SSDEEP

3072:AGNfIg/7G+R0Qnjp3Dpy51l2BD9/GMblR:bfIcG+B5UF21o

Score

7^/10

Malware Config

Targets

- Target
  
  a0c4a8b7cc910a666dc4f823767fef26541038f773d68df175e49133ee837810
- Size
  
  135KB
- MD5
  
  58cb195e821612a6186d914b3b031210
- SHA1
  
  c939bb911fd0d7c9c8e745134e0e3188bb7c93e3
- SHA256
  
  a0c4a8b7cc910a666dc4f823767fef26541038f773d68df175e49133ee837810
- SHA512
  
  6172e426601235fd9cd1c3a169fce0d971189c109a92feaf246bf5737e4c984d65e528f746c042e08434afff030c4e0ea19cc69f6f153a5d5a2e28eafbd3985e
- SSDEEP
  
  3072:AGNfIg/7G+R0Qnjp3Dpy51l2BD9/GMblR:bfIcG+B5UF21o
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Deletes itself
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2