b025a580468d6ed5ae95481e758614ddcc996526da78530b0b52c2a5a43c3b47 | Triage

Sharing

General

Target

b025a580468d6ed5ae95481e758614ddcc996526da78530b0b52c2a5a43c3b47
Size

853KB
Sample

221204-efppdahf51
MD5

2aed1db7b68ab7b0b0154bd70b327eaa
SHA1

8b0c0ff2324a47be1fc29aad5a5fe3ce076fc083
SHA256

b025a580468d6ed5ae95481e758614ddcc996526da78530b0b52c2a5a43c3b47
SHA512

ac9d822ee72d577673df8d6b8b4fb852f43d984bda55f7d6c284a6c55b55030f54a729150b2fcc0af6ddf3a8913bb7054ed26fdb95fca0b7ba0ff103b1957dec
SSDEEP

24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfv8:mqaxyDC2JmSoPvikO88

Score

7^/10

Malware Config

Targets

- Target
  
  b025a580468d6ed5ae95481e758614ddcc996526da78530b0b52c2a5a43c3b47
- Size
  
  853KB
- MD5
  
  2aed1db7b68ab7b0b0154bd70b327eaa
- SHA1
  
  8b0c0ff2324a47be1fc29aad5a5fe3ce076fc083
- SHA256
  
  b025a580468d6ed5ae95481e758614ddcc996526da78530b0b52c2a5a43c3b47
- SHA512
  
  ac9d822ee72d577673df8d6b8b4fb852f43d984bda55f7d6c284a6c55b55030f54a729150b2fcc0af6ddf3a8913bb7054ed26fdb95fca0b7ba0ff103b1957dec
- SSDEEP
  
  24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfv8:mqaxyDC2JmSoPvikO88
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2