fea3856bc8ea5a27974f4e34af3c4238f791cbbd399ecd1c843129adbf0f6a03 | Triage

Sharing

General

Target

fea3856bc8ea5a27974f4e34af3c4238f791cbbd399ecd1c843129adbf0f6a03
Size

36KB
Sample

221203-mrz89ace98
MD5

4166e86f8cda4d0660dcc1848a54cef0
SHA1

c076c719f50fc44ed8d21b5be8380714bbde5fb3
SHA256

fea3856bc8ea5a27974f4e34af3c4238f791cbbd399ecd1c843129adbf0f6a03
SHA512

0970b5b3287a63f8b8a0955b0ce309a846a19e47592a659d5f66d88864a4db5b8b3f20938481f3247316d4304727a0c0e6ea709f1752f60e7ef94ec22fb19c2d
SSDEEP

768:nAhzaI27UYisk1VrM2JwdLD3zKqISzXGWuO+FB:nezaI27/isOMuwd3DKqISz0x

Score

6^/10

Malware Config

Targets

- Target
  
  fea3856bc8ea5a27974f4e34af3c4238f791cbbd399ecd1c843129adbf0f6a03
- Size
  
  36KB
- MD5
  
  4166e86f8cda4d0660dcc1848a54cef0
- SHA1
  
  c076c719f50fc44ed8d21b5be8380714bbde5fb3
- SHA256
  
  fea3856bc8ea5a27974f4e34af3c4238f791cbbd399ecd1c843129adbf0f6a03
- SHA512
  
  0970b5b3287a63f8b8a0955b0ce309a846a19e47592a659d5f66d88864a4db5b8b3f20938481f3247316d4304727a0c0e6ea709f1752f60e7ef94ec22fb19c2d
- SSDEEP
  
  768:nAhzaI27UYisk1VrM2JwdLD3zKqISzXGWuO+FB:nezaI27/isOMuwd3DKqISz0x
Score

6^/10
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2