116cbd30a7187b62b4fd802a3191884cffbeacfc1bd82f61f9298aaf50906056 | Triage

Sharing

General

Target

df4a7556062acc96488d3cc00cc7df0a
Size

578KB
Sample

240326-qtv9vsbd53
MD5

df4a7556062acc96488d3cc00cc7df0a
SHA1

f131c52b2194333da882af3c1f87909e0b0ba0be
SHA256

116cbd30a7187b62b4fd802a3191884cffbeacfc1bd82f61f9298aaf50906056
SHA512

8be39ef6f1d11d0a66a3e5ef9196811b6915340d5c42dc51a155e39171479d1d578d55871b338ab1e419aba98acd154621b9dc812adfc7e40922f93a2f050f33
SSDEEP

12288:yPkZnNZwi3ZlYq/jVIO00rY/qMdb4GtcZy7HyLXz3v/Os3eSPclCR0j:EKN+qlYKjVz00rYiMd8z3vmsuSPc0R0j

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  df4a7556062acc96488d3cc00cc7df0a
- Size
  
  578KB
- MD5
  
  df4a7556062acc96488d3cc00cc7df0a
- SHA1
  
  f131c52b2194333da882af3c1f87909e0b0ba0be
- SHA256
  
  116cbd30a7187b62b4fd802a3191884cffbeacfc1bd82f61f9298aaf50906056
- SHA512
  
  8be39ef6f1d11d0a66a3e5ef9196811b6915340d5c42dc51a155e39171479d1d578d55871b338ab1e419aba98acd154621b9dc812adfc7e40922f93a2f050f33
- SSDEEP
  
  12288:yPkZnNZwi3ZlYq/jVIO00rY/qMdb4GtcZy7HyLXz3v/Os3eSPclCR0j:EKN+qlYKjVz00rYiMd8z3vmsuSPc0R0j
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2