aa2b808b2cc4a60499d6e860ed0f4182d3f2ea2672ee5474bdfc8413fb5b7060 | Triage

Sharing

General

Target

aa2b808b2cc4a60499d6e860ed0f4182d3f2ea2672ee5474bdfc8413fb5b7060
Size

1.1MB
Sample

221127-jx2gqabd86
MD5

c642e8af5f9a523bfdf3cc4ceb4487e7
SHA1

a5b4b864aff67a51c252068a44e6b31a34a86d52
SHA256

aa2b808b2cc4a60499d6e860ed0f4182d3f2ea2672ee5474bdfc8413fb5b7060
SHA512

1a7ab850444a326ce729b3b52253971d9221f64675db64e5a1bfa756c144c0a538928e6e180d7f095c27cadd06f10fb3125fd2e76b206c90f94e676e6ad86bb2
SSDEEP

12288:Bxm03dDATu3TtKUhG3QQkrEcdvMqH1dznOotRldDfHbg5+MH/QTK7ufrncquNGs:BgS73RKUsaVdzOotdDfStfsKafIgs

Score

7^/10

Malware Config

Targets

- Target
  
  aa2b808b2cc4a60499d6e860ed0f4182d3f2ea2672ee5474bdfc8413fb5b7060
- Size
  
  1.1MB
- MD5
  
  c642e8af5f9a523bfdf3cc4ceb4487e7
- SHA1
  
  a5b4b864aff67a51c252068a44e6b31a34a86d52
- SHA256
  
  aa2b808b2cc4a60499d6e860ed0f4182d3f2ea2672ee5474bdfc8413fb5b7060
- SHA512
  
  1a7ab850444a326ce729b3b52253971d9221f64675db64e5a1bfa756c144c0a538928e6e180d7f095c27cadd06f10fb3125fd2e76b206c90f94e676e6ad86bb2
- SSDEEP
  
  12288:Bxm03dDATu3TtKUhG3QQkrEcdvMqH1dznOotRldDfHbg5+MH/QTK7ufrncquNGs:BgS73RKUsaVdzOotdDfStfsKafIgs
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2