afd3eb2dbd0ee496aa49e9ce44d264b20bcbfa9c2bf522510220cfca49102cac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afd3eb2dbd0ee496aa49e9ce44d264b20bcbfa9c2bf522510220cfca49102cac
Size

1.1MB
Sample

221204-hxd6rabe6z
MD5

094315b921f72798e2cdce1f09a6dc48
SHA1

2ec3d4b8dc1f23fa6c41febb9889683cd058408d
SHA256

afd3eb2dbd0ee496aa49e9ce44d264b20bcbfa9c2bf522510220cfca49102cac
SHA512

bc59dcd3f935a03a9ab8eafcb2a735c160b114e744dccc578897e657e76af9cfe28df640dd7ee74d1698d6a9e5d70b4cfda3c87be96dbb2bb872ce782818327f
SSDEEP

12288:7J84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4x:7F7WXbqdUTmWK29ZY47EiLMYTHyL

Score

7^/10

Malware Config

Targets

- Target
  
  afd3eb2dbd0ee496aa49e9ce44d264b20bcbfa9c2bf522510220cfca49102cac
- Size
  
  1.1MB
- MD5
  
  094315b921f72798e2cdce1f09a6dc48
- SHA1
  
  2ec3d4b8dc1f23fa6c41febb9889683cd058408d
- SHA256
  
  afd3eb2dbd0ee496aa49e9ce44d264b20bcbfa9c2bf522510220cfca49102cac
- SHA512
  
  bc59dcd3f935a03a9ab8eafcb2a735c160b114e744dccc578897e657e76af9cfe28df640dd7ee74d1698d6a9e5d70b4cfda3c87be96dbb2bb872ce782818327f
- SSDEEP
  
  12288:7J84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4x:7F7WXbqdUTmWK29ZY47EiLMYTHyL
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2