ebc4de2d00d1de57287005e56afc97d2fe3653e9e263101050391a186fe93bb9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebc4de2d00d1de57287005e56afc97d2fe3653e9e263101050391a186fe93bb9
Size

1.0MB
Sample

221127-dldnmahh8w
MD5

2dc789cf6ab7e403a73644f425f16007
SHA1

2d68045348e0dc12d29f545b0fd354289012baca
SHA256

ebc4de2d00d1de57287005e56afc97d2fe3653e9e263101050391a186fe93bb9
SHA512

8c50e6a333bb254aa07ae7e96ec654561aab239a40e731c6bdc96f57b12fa06b5d826e635dbfb12f9fc3627984617f683dfe1b06b09e578160a29692cf727d27
SSDEEP

24576:zlafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:RaANaRGRpuHetmGimZ

Score

7^/10

Malware Config

Targets

- Target
  
  ebc4de2d00d1de57287005e56afc97d2fe3653e9e263101050391a186fe93bb9
- Size
  
  1.0MB
- MD5
  
  2dc789cf6ab7e403a73644f425f16007
- SHA1
  
  2d68045348e0dc12d29f545b0fd354289012baca
- SHA256
  
  ebc4de2d00d1de57287005e56afc97d2fe3653e9e263101050391a186fe93bb9
- SHA512
  
  8c50e6a333bb254aa07ae7e96ec654561aab239a40e731c6bdc96f57b12fa06b5d826e635dbfb12f9fc3627984617f683dfe1b06b09e578160a29692cf727d27
- SSDEEP
  
  24576:zlafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:RaANaRGRpuHetmGimZ
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2