87ccfaaca6392d92cf8632133db3a1cbc096f98960ad1218de92790bc68c83ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87ccfaaca6392d92cf8632133db3a1cbc096f98960ad1218de92790bc68c83ae
Size

143KB
Sample

221129-gzjctafh3x
MD5

ca832ac1ffd75453a00e42ef0ecf312e
SHA1

297868cbb3ef13378884c245fb1379a227f4e002
SHA256

87ccfaaca6392d92cf8632133db3a1cbc096f98960ad1218de92790bc68c83ae
SHA512

718d62a6ab4b71d2138359de812e9d8e23c12c931ead636318d2f189c6ab0fb44cd023167a6ba9254094b100bddfff9401209f9322d3856ec6a163def532a7fb
SSDEEP

3072:Oe1PnFBhilZmLEcHbhP1esLu+02IFt0qAeLITqnihrF4MsyHka9XCBvFalK2:OAhilZmLXhPcsi+02o0qWOikmHEhFmK

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  87ccfaaca6392d92cf8632133db3a1cbc096f98960ad1218de92790bc68c83ae
- Size
  
  143KB
- MD5
  
  ca832ac1ffd75453a00e42ef0ecf312e
- SHA1
  
  297868cbb3ef13378884c245fb1379a227f4e002
- SHA256
  
  87ccfaaca6392d92cf8632133db3a1cbc096f98960ad1218de92790bc68c83ae
- SHA512
  
  718d62a6ab4b71d2138359de812e9d8e23c12c931ead636318d2f189c6ab0fb44cd023167a6ba9254094b100bddfff9401209f9322d3856ec6a163def532a7fb
- SSDEEP
  
  3072:Oe1PnFBhilZmLEcHbhP1esLu+02IFt0qAeLITqnihrF4MsyHka9XCBvFalK2:OAhilZmLXhPcsi+02o0qWOikmHEhFmK
Score

7^/10

persistence
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Deletes itself
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2