General
-
Target
596dc0adc4865dc96be7c1f8950d3d34348337e85146df0df4cd98d2f527015f
-
Size
691KB
-
Sample
220724-ejx5xsedhk
-
MD5
560c9dcf5ba659df8ea53859dd0abffe
-
SHA1
4cbcba149ddd94cdcd07b7a2f5a71df5e1b6530b
-
SHA256
596dc0adc4865dc96be7c1f8950d3d34348337e85146df0df4cd98d2f527015f
-
SHA512
a3d0ca2fd7c3f0dc5301aaf5ef22212d54c2a23790152ab3c31d2710569213352e91a7345f4bc47a084ecc5095e0474ba9a7be410adce898da33c2f43cf8a3d3
Static task
static1
Behavioral task
behavioral1
Sample
596dc0adc4865dc96be7c1f8950d3d34348337e85146df0df4cd98d2f527015f.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
596dc0adc4865dc96be7c1f8950d3d34348337e85146df0df4cd98d2f527015f.exe
Resource
win10v2004-20220721-en
Malware Config
Targets
-
-
Target
596dc0adc4865dc96be7c1f8950d3d34348337e85146df0df4cd98d2f527015f
-
Size
691KB
-
MD5
560c9dcf5ba659df8ea53859dd0abffe
-
SHA1
4cbcba149ddd94cdcd07b7a2f5a71df5e1b6530b
-
SHA256
596dc0adc4865dc96be7c1f8950d3d34348337e85146df0df4cd98d2f527015f
-
SHA512
a3d0ca2fd7c3f0dc5301aaf5ef22212d54c2a23790152ab3c31d2710569213352e91a7345f4bc47a084ecc5095e0474ba9a7be410adce898da33c2f43cf8a3d3
-
Modifies firewall policy service
-
Sets file execution options in registry
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Adds Run key to start application
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-