Overview

overview

9

Static

static

8

04f57eba11...53.exe

windows7-x64

9

04f57eba11...53.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    04f57eba118d002996864762d8aa1d84dfcf38ea3780c8c119092a0061bb0453

  • Size

    885KB

  • Sample

    221014-k9yf9sghhm

  • MD5

    4a7f257f4a42a1236ad7ca874877bc7a

  • SHA1

    16e1b5cb7575d98828a8489c0e0d08917b9ceab6

  • SHA256

    04f57eba118d002996864762d8aa1d84dfcf38ea3780c8c119092a0061bb0453

  • SHA512

    e3ed9c08285ca0dafc868e515371d224d8cf048a6cbb70cfb3b7e93488cd2b4e6d2ef4d73e533c3421ae8e24bd1487a8025603e06da3974512445ce6a3a038c1

  • SSDEEP

    12288:/W1aCIB7LXu646OPViY4zK3giGOtlUMJ0lhYA32ovwDagRPJDTGfDiBmtgYFTq:+1aR89izzK3g/MNwhYezvwDXGfxtgM

Score
9/10
evasionupx

Malware Config

Targets

    • Target

      04f57eba118d002996864762d8aa1d84dfcf38ea3780c8c119092a0061bb0453

    • Size

      885KB

    • MD5

      4a7f257f4a42a1236ad7ca874877bc7a

    • SHA1

      16e1b5cb7575d98828a8489c0e0d08917b9ceab6

    • SHA256

      04f57eba118d002996864762d8aa1d84dfcf38ea3780c8c119092a0061bb0453

    • SHA512

      e3ed9c08285ca0dafc868e515371d224d8cf048a6cbb70cfb3b7e93488cd2b4e6d2ef4d73e533c3421ae8e24bd1487a8025603e06da3974512445ce6a3a038c1

    • SSDEEP

      12288:/W1aCIB7LXu646OPViY4zK3giGOtlUMJ0lhYA32ovwDagRPJDTGfDiBmtgYFTq:+1aR89izzK3g/MNwhYezvwDXGfxtgM

    Score
    9/10
    evasionupx

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks