aef99fca4e3db8ed1e8888b707bd0062724a2553397ebb4ef0ad6184011ea4aa | Triage

Sharing

General

Target

aef99fca4e3db8ed1e8888b707bd0062724a2553397ebb4ef0ad6184011ea4aa
Size

874KB
Sample

221127-j5c44afe7t
MD5

5b4ae7dbec4a2b49173f94cf04ca07d5
SHA1

908742ec9bc5c0c1c901f152b0ab6af9e96955c1
SHA256

aef99fca4e3db8ed1e8888b707bd0062724a2553397ebb4ef0ad6184011ea4aa
SHA512

3ac3badddb0fd8afb985872404374f1ee06ca6778e429cd33d3642260e8a03a9b3a421e189e770a7cadfa770407bd0c255db9ba7c93c56cffaafad5d05bcb737
SSDEEP

12288:s62u5vuBxvzdQsewncQxiZNK2X4BuZ4S+pev4D9kLEzr8YUrBYqXcsgpXkRmvbEk:s+5vcrdQtwncQAb4BuZvi9BPCcTEe4y

Score

7^/10

Malware Config

Targets

- Target
  
  aef99fca4e3db8ed1e8888b707bd0062724a2553397ebb4ef0ad6184011ea4aa
- Size
  
  874KB
- MD5
  
  5b4ae7dbec4a2b49173f94cf04ca07d5
- SHA1
  
  908742ec9bc5c0c1c901f152b0ab6af9e96955c1
- SHA256
  
  aef99fca4e3db8ed1e8888b707bd0062724a2553397ebb4ef0ad6184011ea4aa
- SHA512
  
  3ac3badddb0fd8afb985872404374f1ee06ca6778e429cd33d3642260e8a03a9b3a421e189e770a7cadfa770407bd0c255db9ba7c93c56cffaafad5d05bcb737
- SSDEEP
  
  12288:s62u5vuBxvzdQsewncQxiZNK2X4BuZ4S+pev4D9kLEzr8YUrBYqXcsgpXkRmvbEk:s+5vcrdQtwncQAb4BuZvi9BPCcTEe4y
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2