ee2d3f95368b5dc1c2215fd7049be02f6e2ba1edb2239c49087ae38f0372eac9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee2d3f95368b5dc1c2215fd7049be02f6e2ba1edb2239c49087ae38f0372eac9
Size

1.1MB
Sample

221127-qd3n1aab92
MD5

fe7ca0510951269f83999f413e656a01
SHA1

ac0446fb15b5cc7fe10be55158a913b26b4dfc1b
SHA256

ee2d3f95368b5dc1c2215fd7049be02f6e2ba1edb2239c49087ae38f0372eac9
SHA512

a2ca92473aaaccac7968d0875aeaa0546d2e4055f2b4ea2d9a79369e07ef2d076fe131184b1573227b8f6c802b6940170507b1bd6b02a31d1776508f2915eaee
SSDEEP

24576:I88FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wWh:I8fRbE2VolvZWh

Score

7^/10

Malware Config

Targets

- Target
  
  ee2d3f95368b5dc1c2215fd7049be02f6e2ba1edb2239c49087ae38f0372eac9
- Size
  
  1.1MB
- MD5
  
  fe7ca0510951269f83999f413e656a01
- SHA1
  
  ac0446fb15b5cc7fe10be55158a913b26b4dfc1b
- SHA256
  
  ee2d3f95368b5dc1c2215fd7049be02f6e2ba1edb2239c49087ae38f0372eac9
- SHA512
  
  a2ca92473aaaccac7968d0875aeaa0546d2e4055f2b4ea2d9a79369e07ef2d076fe131184b1573227b8f6c802b6940170507b1bd6b02a31d1776508f2915eaee
- SSDEEP
  
  24576:I88FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wWh:I8fRbE2VolvZWh
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2