General
-
Target
3a4c568e669e27478a62bdfa3583e96ad529f89091fa1777909952928e872d2e
-
Size
753KB
-
Sample
221123-vveeysch9x
-
MD5
1ba554db0dec093c7f2588e4fa91a5c7
-
SHA1
e535b3e17d6039f29d649e365099ecbedfd5c56a
-
SHA256
3a4c568e669e27478a62bdfa3583e96ad529f89091fa1777909952928e872d2e
-
SHA512
4938a18aa0205050cb7fc1a5de91150d27c428c8f6c5b9eb4b19c67563d79b97421f2a8722c24ae0702f8ff70dba8eb16c5f0152ad52da772683600ef2f2a8f9
-
SSDEEP
12288:XhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4apQGvYLJMM7qUZDQ:dRmJkcoQricOIQxiZY1iapJvY1jWUZ8
Static task
static1
Behavioral task
behavioral1
Sample
3a4c568e669e27478a62bdfa3583e96ad529f89091fa1777909952928e872d2e.exe
Resource
win7-20221111-en
Malware Config
Targets
-
-
Target
3a4c568e669e27478a62bdfa3583e96ad529f89091fa1777909952928e872d2e
-
Size
753KB
-
MD5
1ba554db0dec093c7f2588e4fa91a5c7
-
SHA1
e535b3e17d6039f29d649e365099ecbedfd5c56a
-
SHA256
3a4c568e669e27478a62bdfa3583e96ad529f89091fa1777909952928e872d2e
-
SHA512
4938a18aa0205050cb7fc1a5de91150d27c428c8f6c5b9eb4b19c67563d79b97421f2a8722c24ae0702f8ff70dba8eb16c5f0152ad52da772683600ef2f2a8f9
-
SSDEEP
12288:XhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4apQGvYLJMM7qUZDQ:dRmJkcoQricOIQxiZY1iapJvY1jWUZ8
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Deletes itself
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-