e1bcd64547ef9caa17439afd703dd712776c6d0d4db0bab9e9523cac3c318f90 | Triage

Sharing

General

Target

e1bcd64547ef9caa17439afd703dd712776c6d0d4db0bab9e9523cac3c318f90
Size

850KB
Sample

221127-zb7dvafh62
MD5

e34ce27e5a89b5b796cddd765bd6e13c
SHA1

878a6950c0e2ac3361045ccf563da1f98e2bc527
SHA256

e1bcd64547ef9caa17439afd703dd712776c6d0d4db0bab9e9523cac3c318f90
SHA512

918ca6d52ec9899793df438bd40225e2c309ea4f7131711e0e469903c806beb053cbc1ecc4631cd5f5ad151dc893544e1f7a2f8f9083a6d59caf929511cc79a2
SSDEEP

24576:tYq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvj:+qaxyDC2JmSoPvikO8j

Score

7^/10

Malware Config

Targets

- Target
  
  e1bcd64547ef9caa17439afd703dd712776c6d0d4db0bab9e9523cac3c318f90
- Size
  
  850KB
- MD5
  
  e34ce27e5a89b5b796cddd765bd6e13c
- SHA1
  
  878a6950c0e2ac3361045ccf563da1f98e2bc527
- SHA256
  
  e1bcd64547ef9caa17439afd703dd712776c6d0d4db0bab9e9523cac3c318f90
- SHA512
  
  918ca6d52ec9899793df438bd40225e2c309ea4f7131711e0e469903c806beb053cbc1ecc4631cd5f5ad151dc893544e1f7a2f8f9083a6d59caf929511cc79a2
- SSDEEP
  
  24576:tYq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvj:+qaxyDC2JmSoPvikO8j
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2