b09d504fadbc0a0788b9e710d07aaf9d0cf70ea3d3e7b1c4f5cb917130eb4e46 | Triage

Sharing

General

Target

b09d504fadbc0a0788b9e710d07aaf9d0cf70ea3d3e7b1c4f5cb917130eb4e46
Size

268KB
Sample

221206-mw3j6sdh6y
MD5

4dac0e5869e435924f182ff05bfc7c97
SHA1

d8be893f9962d06135b74dd476fec934f6554e51
SHA256

b09d504fadbc0a0788b9e710d07aaf9d0cf70ea3d3e7b1c4f5cb917130eb4e46
SHA512

7db5321a918ecca1932e55a27fe561c4f6ad74c50c81d1ae219f46d3416f9f43d520204ccc26169a1ec0e272fba5826c4bf8d7264213bf0a8c16129bc9c39bc3
SSDEEP

3072:szB4PSLslTg4ybwmZvuf+J0/93B2NJh7fG8/Tch62/b9F4gc2Qyl2mzGmf:UyTjybwmZvIk0+1G8Trgh5Cmf

Score

6^/10

Malware Config

Targets

- Target
  
  b09d504fadbc0a0788b9e710d07aaf9d0cf70ea3d3e7b1c4f5cb917130eb4e46
- Size
  
  268KB
- MD5
  
  4dac0e5869e435924f182ff05bfc7c97
- SHA1
  
  d8be893f9962d06135b74dd476fec934f6554e51
- SHA256
  
  b09d504fadbc0a0788b9e710d07aaf9d0cf70ea3d3e7b1c4f5cb917130eb4e46
- SHA512
  
  7db5321a918ecca1932e55a27fe561c4f6ad74c50c81d1ae219f46d3416f9f43d520204ccc26169a1ec0e272fba5826c4bf8d7264213bf0a8c16129bc9c39bc3
- SSDEEP
  
  3072:szB4PSLslTg4ybwmZvuf+J0/93B2NJh7fG8/Tch62/b9F4gc2Qyl2mzGmf:UyTjybwmZvIk0+1G8Trgh5Cmf
Score

6^/10
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2