Overview

overview

8

Static

static

9c32bf5f0c...82.exe

windows7-x64

8

9c32bf5f0c...82.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9c32bf5f0cd6501dc14ca47e091572b1cddd9d18d198c79f1b48da62a7bf5882

  • Size

    39KB

  • Sample

    221001-2cscesaag5

  • MD5

    031c4527a491542087adab7abeda2177

  • SHA1

    e73072ef8970bdc92c22b742a6e80268527f3cb5

  • SHA256

    9c32bf5f0cd6501dc14ca47e091572b1cddd9d18d198c79f1b48da62a7bf5882

  • SHA512

    2f0fffe2809bb4b64b55dd998926225ee867eede9449e29ce5a258a679c589357816abb3e26d57d71f9cabd9c43b3569e5b7879f9c9c8faa5500902495ba636f

  • SSDEEP

    768:7DojvFH7eTi0Xz+rfxJnYsXMoaQ78b4Z2YupK4ekc+jeD/6v4:7Ujvt7v0Xz+rfrnzvanbK3C18s4

Score
8/10

Malware Config

Targets

    • Target

      9c32bf5f0cd6501dc14ca47e091572b1cddd9d18d198c79f1b48da62a7bf5882

    • Size

      39KB

    • MD5

      031c4527a491542087adab7abeda2177

    • SHA1

      e73072ef8970bdc92c22b742a6e80268527f3cb5

    • SHA256

      9c32bf5f0cd6501dc14ca47e091572b1cddd9d18d198c79f1b48da62a7bf5882

    • SHA512

      2f0fffe2809bb4b64b55dd998926225ee867eede9449e29ce5a258a679c589357816abb3e26d57d71f9cabd9c43b3569e5b7879f9c9c8faa5500902495ba636f

    • SSDEEP

      768:7DojvFH7eTi0Xz+rfxJnYsXMoaQ78b4Z2YupK4ekc+jeD/6v4:7Ujvt7v0Xz+rfrnzvanbK3C18s4

    Score
    8/10

    • Blocklisted process makes network request

    • Deletes itself

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks