521302edc63f6e9a44e828d76a55544a38270b321689f0f783efd5bf423e4293 | Triage

Sharing

General

Target

521302edc63f6e9a44e828d76a55544a38270b321689f0f783efd5bf423e4293
Size

34KB
Sample

221201-mbb7gshb92
MD5

0006c4d07b2247b6053abab325b18bb0
SHA1

ccda25745868923c09ee92dd2d5cee5aad7eb06a
SHA256

521302edc63f6e9a44e828d76a55544a38270b321689f0f783efd5bf423e4293
SHA512

6c55a89a9b1dad0aadeff3edc1d9b826c41dcd0920483952507c01a2f2da9edf4462523c660f0b43cf9df59840fede936f7f67d55fc2097139db542fa4ee0b6e
SSDEEP

768:Y6huRKdgYIDWI5yEb0dZBQDv2sUANoDXYfxQqPnhYqicAdav:lAAgmcoOvEDXYEav

Score

6^/10

Malware Config

Targets

- Target
  
  521302edc63f6e9a44e828d76a55544a38270b321689f0f783efd5bf423e4293
- Size
  
  34KB
- MD5
  
  0006c4d07b2247b6053abab325b18bb0
- SHA1
  
  ccda25745868923c09ee92dd2d5cee5aad7eb06a
- SHA256
  
  521302edc63f6e9a44e828d76a55544a38270b321689f0f783efd5bf423e4293
- SHA512
  
  6c55a89a9b1dad0aadeff3edc1d9b826c41dcd0920483952507c01a2f2da9edf4462523c660f0b43cf9df59840fede936f7f67d55fc2097139db542fa4ee0b6e
- SSDEEP
  
  768:Y6huRKdgYIDWI5yEb0dZBQDv2sUANoDXYfxQqPnhYqicAdav:lAAgmcoOvEDXYEav
Score

6^/10
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2