37c62007091add9a17fb38c0db96aef01d04715b5731fe94a6a02a155585d6d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37c62007091add9a17fb38c0db96aef01d04715b5731fe94a6a02a155585d6d2
Size

2.2MB
Sample

221205-jpsjvadh7w
MD5

1ed2ceb80f267692c185edafff8b9e94
SHA1

7e08bf5b548111f0632d6397b3112882e61cce19
SHA256

37c62007091add9a17fb38c0db96aef01d04715b5731fe94a6a02a155585d6d2
SHA512

3e0b78934d2408b1d1687b7b3bae77c5f0ffd6c907900cac741b90f12dfa9414b071664d736abb56536c914dfbd7d3670025359cef05a5ad310e48642bcd5185
SSDEEP

24576:yzfwwRIwz9G3mpks6a/+CAWnTfj7RgIKUq9rBVmOfb0E4s8Oa2YD37ZyATGrJqpV:yfIwU2ks6DWAuOlV8bxD37cAT3LeM

Score

7^/10

Malware Config

Targets

- Target
  
  37c62007091add9a17fb38c0db96aef01d04715b5731fe94a6a02a155585d6d2
- Size
  
  2.2MB
- MD5
  
  1ed2ceb80f267692c185edafff8b9e94
- SHA1
  
  7e08bf5b548111f0632d6397b3112882e61cce19
- SHA256
  
  37c62007091add9a17fb38c0db96aef01d04715b5731fe94a6a02a155585d6d2
- SHA512
  
  3e0b78934d2408b1d1687b7b3bae77c5f0ffd6c907900cac741b90f12dfa9414b071664d736abb56536c914dfbd7d3670025359cef05a5ad310e48642bcd5185
- SSDEEP
  
  24576:yzfwwRIwz9G3mpks6a/+CAWnTfj7RgIKUq9rBVmOfb0E4s8Oa2YD37ZyATGrJqpV:yfIwU2ks6DWAuOlV8bxD37cAT3LeM
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2