bf72ae6f6bd70cb6c8c03a4c5332b3090987fa9055fe36abae4764e08ba402a1 | Triage

Sharing

General

Target

bf72ae6f6bd70cb6c8c03a4c5332b3090987fa9055fe36abae4764e08ba402a1
Size

1.5MB
Sample

221124-axw3kaag8t
MD5

aeb740595ba97f62efebb2bff028f044
SHA1

c4a03ae5b44f10e5314a3e4567119c5b20c30e40
SHA256

bf72ae6f6bd70cb6c8c03a4c5332b3090987fa9055fe36abae4764e08ba402a1
SHA512

d14067be57b49573799ad39d8aaef2c4ec4a40adb6cd58b6134dd2c2d6a0b3b88c603bc3aa9ea2df6de834903b351ffe61a0135f435d760e8906172af4aa6445
SSDEEP

24576:7PEzeDWtazKrcVWv+FjisSOZYjmOdXQ+ARZoQWnQUwMlds0VwI/9Mm:bIwwImsMqQA57oQWcGdsyf

Score

5^/10

Malware Config

Targets

- Target
  
  bf72ae6f6bd70cb6c8c03a4c5332b3090987fa9055fe36abae4764e08ba402a1
- Size
  
  1.5MB
- MD5
  
  aeb740595ba97f62efebb2bff028f044
- SHA1
  
  c4a03ae5b44f10e5314a3e4567119c5b20c30e40
- SHA256
  
  bf72ae6f6bd70cb6c8c03a4c5332b3090987fa9055fe36abae4764e08ba402a1
- SHA512
  
  d14067be57b49573799ad39d8aaef2c4ec4a40adb6cd58b6134dd2c2d6a0b3b88c603bc3aa9ea2df6de834903b351ffe61a0135f435d760e8906172af4aa6445
- SSDEEP
  
  24576:7PEzeDWtazKrcVWv+FjisSOZYjmOdXQ+ARZoQWnQUwMlds0VwI/9Mm:bIwwImsMqQA57oQWcGdsyf
Score

5^/10
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2