b006d1733bf1c3261eaa85ee6f1bc1ec37f579e29479433bdd3d7cb6fb803dff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b006d1733bf1c3261eaa85ee6f1bc1ec37f579e29479433bdd3d7cb6fb803dff
Size

1.1MB
Sample

221204-fra6ssdf4x
MD5

168b34e9f8fb32ef9a6b7a84c2a144e1
SHA1

1357317b4614cde6a60d284729bed864fd69b1e4
SHA256

b006d1733bf1c3261eaa85ee6f1bc1ec37f579e29479433bdd3d7cb6fb803dff
SHA512

5b88c8d4b653bf4f01e24c95c9fbb8c9256f7b9be7fd7e7d683b4081a75884a0440fed9d2c353da34d95a9211f39f9c8c1670c524b216ba46dac68b22e40641c
SSDEEP

24576:I88FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wWd:I8fRbE2VolvZWd

Score

7^/10

Malware Config

Targets

- Target
  
  b006d1733bf1c3261eaa85ee6f1bc1ec37f579e29479433bdd3d7cb6fb803dff
- Size
  
  1.1MB
- MD5
  
  168b34e9f8fb32ef9a6b7a84c2a144e1
- SHA1
  
  1357317b4614cde6a60d284729bed864fd69b1e4
- SHA256
  
  b006d1733bf1c3261eaa85ee6f1bc1ec37f579e29479433bdd3d7cb6fb803dff
- SHA512
  
  5b88c8d4b653bf4f01e24c95c9fbb8c9256f7b9be7fd7e7d683b4081a75884a0440fed9d2c353da34d95a9211f39f9c8c1670c524b216ba46dac68b22e40641c
- SSDEEP
  
  24576:I88FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wWd:I8fRbE2VolvZWd
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2