f48159606036b6ef4402965013d8a53608f81d2aadb0c29be9024b15da0fec2a | Triage

Sharing

General

Target

f48159606036b6ef4402965013d8a53608f81d2aadb0c29be9024b15da0fec2a
Size

6.2MB
Sample

231013-qa6aqabh23
MD5

95bd09df6144f1e2bd33665f86deb927
SHA1

1273881657802b82a1ee9f4a8ea5d67581e1cede
SHA256

f48159606036b6ef4402965013d8a53608f81d2aadb0c29be9024b15da0fec2a
SHA512

625d95bc1623b5b309098c10b2bed4cda16d71f3d652a02be3321886a6b5a576e101031ea1329f4420f5ef3b9d129fe82a72b1b1937ebb5916329a3702d1bef5
SSDEEP

196608:ouQD74wo46Orhr30gHXwrBH+pEULsGorSvIVkq1Ua:ozD7F30gHXwWAFrSvIuMUa

Score

7^/10

Malware Config

Targets

- Target
  
  f48159606036b6ef4402965013d8a53608f81d2aadb0c29be9024b15da0fec2a
- Size
  
  6.2MB
- MD5
  
  95bd09df6144f1e2bd33665f86deb927
- SHA1
  
  1273881657802b82a1ee9f4a8ea5d67581e1cede
- SHA256
  
  f48159606036b6ef4402965013d8a53608f81d2aadb0c29be9024b15da0fec2a
- SHA512
  
  625d95bc1623b5b309098c10b2bed4cda16d71f3d652a02be3321886a6b5a576e101031ea1329f4420f5ef3b9d129fe82a72b1b1937ebb5916329a3702d1bef5
- SSDEEP
  
  196608:ouQD74wo46Orhr30gHXwrBH+pEULsGorSvIVkq1Ua:ozD7F30gHXwWAFrSvIuMUa
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2