General

  • Target

    SecuriteInfo.com.Downloader.Generic14.CHCV.9257.1895

  • Size

    248KB

  • Sample

    201109-dfzhlszrvs

  • MD5

    0bfd40449c1de10ddaa4d9a85e01b32c

  • SHA1

    6717435249b4c5a75c34f4d9584d3f42b45eb6cc

  • SHA256

    7c7006f806e0b360bebc42c8e7d75507afbcd0569f153adc0cf06f5a35e2c1b3

  • SHA512

    ff3331152209921783969033ea04967d17d95d30a90001140b94e4773dcf411b1395a9cbef810e047230f41bcdde6222492001f3826fcc445a3f94926a3c7ab6

Score
7/10

Malware Config

Targets

    • Target

      SecuriteInfo.com.Downloader.Generic14.CHCV.9257.1895

    • Size

      248KB

    • MD5

      0bfd40449c1de10ddaa4d9a85e01b32c

    • SHA1

      6717435249b4c5a75c34f4d9584d3f42b45eb6cc

    • SHA256

      7c7006f806e0b360bebc42c8e7d75507afbcd0569f153adc0cf06f5a35e2c1b3

    • SHA512

      ff3331152209921783969033ea04967d17d95d30a90001140b94e4773dcf411b1395a9cbef810e047230f41bcdde6222492001f3826fcc445a3f94926a3c7ab6

    Score
    7/10
    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Deletes itself

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Hidden Files and Directories

1
T1158

Defense Evasion

Hidden Files and Directories

1
T1158

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks