eb6f2c0c27ced7d03344bf070b3f8cbdefcf1b680400af1bb49294df69a1e1fb | Triage

Sharing

General

Target

eb6f2c0c27ced7d03344bf070b3f8cbdefcf1b680400af1bb49294df69a1e1fb
Size

312KB
Sample

221123-hx8qcsee97
MD5

4fb75a0b6aa7e1e8f3c8bd452abb561a
SHA1

8ba5ca6e5a66f08667b8bdc6ac893ae17d414da3
SHA256

eb6f2c0c27ced7d03344bf070b3f8cbdefcf1b680400af1bb49294df69a1e1fb
SHA512

ebcff9b776038dada75398cd98af6489b4175e7c9fc617772cb865a26d92e03134c94fbc3a189264e56f7fc3ea4ab02fea56c440e872239009bb8d55b0d44e67
SSDEEP

6144:xrkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iim:xrkau6/eIo43ts7KcXgXAN7ij

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  eb6f2c0c27ced7d03344bf070b3f8cbdefcf1b680400af1bb49294df69a1e1fb
- Size
  
  312KB
- MD5
  
  4fb75a0b6aa7e1e8f3c8bd452abb561a
- SHA1
  
  8ba5ca6e5a66f08667b8bdc6ac893ae17d414da3
- SHA256
  
  eb6f2c0c27ced7d03344bf070b3f8cbdefcf1b680400af1bb49294df69a1e1fb
- SHA512
  
  ebcff9b776038dada75398cd98af6489b4175e7c9fc617772cb865a26d92e03134c94fbc3a189264e56f7fc3ea4ab02fea56c440e872239009bb8d55b0d44e67
- SSDEEP
  
  6144:xrkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iim:xrkau6/eIo43ts7KcXgXAN7ij
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2