af7795fd31502b8f75250d58c27bdb76f85b8cfab2f98f9a0cd1efb40b6a5095 | Triage

Sharing

General

Target

af7795fd31502b8f75250d58c27bdb76f85b8cfab2f98f9a0cd1efb40b6a5095
Size

1.1MB
Sample

221127-qr2zmabb72
MD5

1fd8e956dab91c4685cfd07379dd6f5e
SHA1

2a4bfe34edc63eb3e9e7f80ed5b5c6f3bff78f54
SHA256

af7795fd31502b8f75250d58c27bdb76f85b8cfab2f98f9a0cd1efb40b6a5095
SHA512

1f0da4cdc439f59d46e3312c26cc0bd3aa45cf42d3e5b3c61e1363fbcab71135b097223e1ecc53ac4e9a8f1b8d7759022441da21a0ce5c2f8a53b62f101ac63f
SSDEEP

12288:ERecnV4R0MA7najOoalUAZZz6DyyWfiAAMu8GCJYkEno4CUdUKGNa4zLKY6iTcop:ErEEVZuFW5hVJbEnoQ9VukiTdwaOo

Score

7^/10

Malware Config

Targets

- Target
  
  af7795fd31502b8f75250d58c27bdb76f85b8cfab2f98f9a0cd1efb40b6a5095
- Size
  
  1.1MB
- MD5
  
  1fd8e956dab91c4685cfd07379dd6f5e
- SHA1
  
  2a4bfe34edc63eb3e9e7f80ed5b5c6f3bff78f54
- SHA256
  
  af7795fd31502b8f75250d58c27bdb76f85b8cfab2f98f9a0cd1efb40b6a5095
- SHA512
  
  1f0da4cdc439f59d46e3312c26cc0bd3aa45cf42d3e5b3c61e1363fbcab71135b097223e1ecc53ac4e9a8f1b8d7759022441da21a0ce5c2f8a53b62f101ac63f
- SSDEEP
  
  12288:ERecnV4R0MA7najOoalUAZZz6DyyWfiAAMu8GCJYkEno4CUdUKGNa4zLKY6iTcop:ErEEVZuFW5hVJbEnoQ9VukiTdwaOo
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2