af8400d605a7299b1bbc394841d8c171acfa5d5adcc9e8a6d4e44aa314a43084 | Triage

Sharing

General

Target

af8400d605a7299b1bbc394841d8c171acfa5d5adcc9e8a6d4e44aa314a43084
Size

701KB
Sample

221204-lxnlzagg99
MD5

688f3ce3ba71e830ca6777cd33206570
SHA1

b4aa30cce7ac5faa4ac888e1fec23cbba91cdffa
SHA256

af8400d605a7299b1bbc394841d8c171acfa5d5adcc9e8a6d4e44aa314a43084
SHA512

e5d1bb1cc0ffc031cdb26b92c4db2d0bebb663339909b2ca2429005c45726b185eafc05d96aaed453564083351c014d8082126a8afd23ddb8c92eb5f841fb8a5
SSDEEP

12288:tHgLxi7Ma55+pDZIWcZWO5RgbdtK15LRCxg1RHeDpMgv4t1goX86ri:tHMiAe5aIWiFHktK7eDpMgvO11M6ri

Score

7^/10

Malware Config

Targets

- Target
  
  af8400d605a7299b1bbc394841d8c171acfa5d5adcc9e8a6d4e44aa314a43084
- Size
  
  701KB
- MD5
  
  688f3ce3ba71e830ca6777cd33206570
- SHA1
  
  b4aa30cce7ac5faa4ac888e1fec23cbba91cdffa
- SHA256
  
  af8400d605a7299b1bbc394841d8c171acfa5d5adcc9e8a6d4e44aa314a43084
- SHA512
  
  e5d1bb1cc0ffc031cdb26b92c4db2d0bebb663339909b2ca2429005c45726b185eafc05d96aaed453564083351c014d8082126a8afd23ddb8c92eb5f841fb8a5
- SSDEEP
  
  12288:tHgLxi7Ma55+pDZIWcZWO5RgbdtK15LRCxg1RHeDpMgv4t1goX86ri:tHMiAe5aIWiFHktK7eDpMgvO11M6ri
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2