efbcf80f5b316dabbdc70b1f42b030483a2f2328ffac6b05324e0ddbb6263124 | Triage

Sharing

General

Target

efbcf80f5b316dabbdc70b1f42b030483a2f2328ffac6b05324e0ddbb6263124
Size

906KB
Sample

221207-cnvt9afb68
MD5

209973c43f93eb4ff7de97c35730ba01
SHA1

08e4c1b549a802ba4ad0760848a9085dfff607e7
SHA256

efbcf80f5b316dabbdc70b1f42b030483a2f2328ffac6b05324e0ddbb6263124
SHA512

034de7d4d570ab0dc40fd0992e26542a91bb759414c70979b918af0099a916b30e9760f1e2e4880fc50898e5d47f3787fcc9ebfaa4782f76207c1b7c5d3b3b6d
SSDEEP

1536:gR2LfYJK++++++++++++++++++++UAgo1eo1UW/JUM1XZS:gRRo1eo1jKM1XZS

Score

10^/10

evasion upx

Malware Config

Targets

- Target
  
  efbcf80f5b316dabbdc70b1f42b030483a2f2328ffac6b05324e0ddbb6263124
- Size
  
  906KB
- MD5
  
  209973c43f93eb4ff7de97c35730ba01
- SHA1
  
  08e4c1b549a802ba4ad0760848a9085dfff607e7
- SHA256
  
  efbcf80f5b316dabbdc70b1f42b030483a2f2328ffac6b05324e0ddbb6263124
- SHA512
  
  034de7d4d570ab0dc40fd0992e26542a91bb759414c70979b918af0099a916b30e9760f1e2e4880fc50898e5d47f3787fcc9ebfaa4782f76207c1b7c5d3b3b6d
- SSDEEP
  
  1536:gR2LfYJK++++++++++++++++++++UAgo1eo1UW/JUM1XZS:gRRo1eo1jKM1XZS
Score

10^/10

evasion upx
- Modifies firewall policy service
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2