84145ae22e083c9515bc7f5821739ce0adedddf9309996467e35993ad21897f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84145ae22e083c9515bc7f5821739ce0adedddf9309996467e35993ad21897f5
Size

60KB
Sample

221012-trzfaabbal
MD5

633ebbd036a7046afd5d75b9cff4b5f1
SHA1

aa006fc07d5ef12dbd5dbb6b9c939b0aea3157ba
SHA256

84145ae22e083c9515bc7f5821739ce0adedddf9309996467e35993ad21897f5
SHA512

b0c0b885ce9a8a10b3609b3e77663d1a50db89ad69224c59612e4f25ba3f3af996f8c951c749ed1b3ed391400189b78a8ab5e859d67bec959e34c640ad0e0a49
SSDEEP

768:9lbLC80mPT1ZMXxKtjIJhUlQ2Q8fqTcwt/lIH7X+6inqKboh2V:/bLd0mPhWotjIolQ2Q8fqTcwNlt

Score

6^/10

Malware Config

Targets

- Target
  
  84145ae22e083c9515bc7f5821739ce0adedddf9309996467e35993ad21897f5
- Size
  
  60KB
- MD5
  
  633ebbd036a7046afd5d75b9cff4b5f1
- SHA1
  
  aa006fc07d5ef12dbd5dbb6b9c939b0aea3157ba
- SHA256
  
  84145ae22e083c9515bc7f5821739ce0adedddf9309996467e35993ad21897f5
- SHA512
  
  b0c0b885ce9a8a10b3609b3e77663d1a50db89ad69224c59612e4f25ba3f3af996f8c951c749ed1b3ed391400189b78a8ab5e859d67bec959e34c640ad0e0a49
- SSDEEP
  
  768:9lbLC80mPT1ZMXxKtjIJhUlQ2Q8fqTcwt/lIH7X+6inqKboh2V:/bLd0mPhWotjIolQ2Q8fqTcwNlt
Score

6^/10
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2