ebeba9051594ecf106877e1e4b1aa22e0938ab008743cc1320d38869089b0bb7 | Triage

Sharing

General

Target

ebeba9051594ecf106877e1e4b1aa22e0938ab008743cc1320d38869089b0bb7
Size

1.1MB
Sample

221127-qeecssdh3v
MD5

8af78111db226975e5f74311fb4cefe4
SHA1

64e1685f9282a2819c242d76027f55c91ded8c13
SHA256

ebeba9051594ecf106877e1e4b1aa22e0938ab008743cc1320d38869089b0bb7
SHA512

2bddd54747d2d0946b51a4aa016a8aa6ae0c614cabbcab0cfd18e452d4e31ccfb3519cd8d4bd0ad111a2681ad66bc9e9a2c5d17af16c71bdac04818f5daf2e42
SSDEEP

24576:I88FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:I8fRbE2VolvZW

Score

7^/10

Malware Config

Targets

- Target
  
  ebeba9051594ecf106877e1e4b1aa22e0938ab008743cc1320d38869089b0bb7
- Size
  
  1.1MB
- MD5
  
  8af78111db226975e5f74311fb4cefe4
- SHA1
  
  64e1685f9282a2819c242d76027f55c91ded8c13
- SHA256
  
  ebeba9051594ecf106877e1e4b1aa22e0938ab008743cc1320d38869089b0bb7
- SHA512
  
  2bddd54747d2d0946b51a4aa016a8aa6ae0c614cabbcab0cfd18e452d4e31ccfb3519cd8d4bd0ad111a2681ad66bc9e9a2c5d17af16c71bdac04818f5daf2e42
- SSDEEP
  
  24576:I88FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:I8fRbE2VolvZW
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2