6d1702087b7aeddad67dfcc17824a79767078a7c8a9ce8a67c848ce8e27a159d | Triage

Sharing

General

Target

6d1702087b7aeddad67dfcc17824a79767078a7c8a9ce8a67c848ce8e27a159d
Size

9.3MB
Sample

231011-ryn7sade2x
MD5

b340d4d00119ff6f8468a13429decb04
SHA1

9f383b3a5d9d5e556e5468f5af2c1dff33d6f8dc
SHA256

6d1702087b7aeddad67dfcc17824a79767078a7c8a9ce8a67c848ce8e27a159d
SHA512

3372d2c279b2775cbb1be730d4e4eb169d019ab0fe17aa907e66335d198a11775cbace6d16810ef89324b68f507d16370bdda1efb6cef1b18a852d35d6d14ea8
SSDEEP

196608:trvIOGT0uaarBrFtDH5hTB5IaXSu9FyAxTUy79IPGuucF:NW07aBbTToaXSufyAxTUy79IPfucF

Score

7^/10

Malware Config

Targets

- Target
  
  6d1702087b7aeddad67dfcc17824a79767078a7c8a9ce8a67c848ce8e27a159d
- Size
  
  9.3MB
- MD5
  
  b340d4d00119ff6f8468a13429decb04
- SHA1
  
  9f383b3a5d9d5e556e5468f5af2c1dff33d6f8dc
- SHA256
  
  6d1702087b7aeddad67dfcc17824a79767078a7c8a9ce8a67c848ce8e27a159d
- SHA512
  
  3372d2c279b2775cbb1be730d4e4eb169d019ab0fe17aa907e66335d198a11775cbace6d16810ef89324b68f507d16370bdda1efb6cef1b18a852d35d6d14ea8
- SSDEEP
  
  196608:trvIOGT0uaarBrFtDH5hTB5IaXSu9FyAxTUy79IPGuucF:NW07aBbTToaXSufyAxTUy79IPfucF
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2