14803d738ab40c019f8976c4ae4185bea07a0714c9b3108401aea688341955d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4f3468f92b9d34f5214cf3095fa1049
Size

586KB
Sample

240305-r3e5nshb61
MD5

b4f3468f92b9d34f5214cf3095fa1049
SHA1

5d93698c086f958efa8066c53c2a403246c6d444
SHA256

14803d738ab40c019f8976c4ae4185bea07a0714c9b3108401aea688341955d6
SHA512

0a885bbe5e3b31d95c3ff174a02ff65486bc40e9d4465aea4db109e0da0b4fab7a06a53abf257abba5858f851e62bbe5c9ae1e6b17a6d26422cd75682a514827
SSDEEP

12288:TBaDBRbn4Xw5I0nVMn2mqHeIHf4dR4e4kUD3eUG00DUJcR3rBED90ZRO8sF:UDB94XQVesDyRD4kUD3eUG00DUJcNrid

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b4f3468f92b9d34f5214cf3095fa1049
- Size
  
  586KB
- MD5
  
  b4f3468f92b9d34f5214cf3095fa1049
- SHA1
  
  5d93698c086f958efa8066c53c2a403246c6d444
- SHA256
  
  14803d738ab40c019f8976c4ae4185bea07a0714c9b3108401aea688341955d6
- SHA512
  
  0a885bbe5e3b31d95c3ff174a02ff65486bc40e9d4465aea4db109e0da0b4fab7a06a53abf257abba5858f851e62bbe5c9ae1e6b17a6d26422cd75682a514827
- SSDEEP
  
  12288:TBaDBRbn4Xw5I0nVMn2mqHeIHf4dR4e4kUD3eUG00DUJcR3rBED90ZRO8sF:UDB94XQVesDyRD4kUD3eUG00DUJcNrid
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2