General
-
Target
0ff2d8e546d0198ff31290a2bbfdd0f74ef0e7076789ab04d0a771e777944a41
-
Size
35KB
-
Sample
221124-aflv9she81
-
MD5
08e24dc90e0469b438f318b91227e2ff
-
SHA1
5114d01696d64c8f4026cbeca3ca1f9dbfdade27
-
SHA256
0ff2d8e546d0198ff31290a2bbfdd0f74ef0e7076789ab04d0a771e777944a41
-
SHA512
b9e4f312cb0d4f066a1c30fc9d19d87442b56c152f6872f94a69c5a69ea9267dc0ea22dcd1b4de79d95d24d3045d368d009c5843f4b28901c339a377740028b8
-
SSDEEP
768:Dp9MaScKyZpS0AW2E+wgEiNSG/V/6SmUhi:DpHXS9EQNzp6SmUg
Static task
static1
Behavioral task
behavioral1
Sample
0ff2d8e546d0198ff31290a2bbfdd0f74ef0e7076789ab04d0a771e777944a41.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0ff2d8e546d0198ff31290a2bbfdd0f74ef0e7076789ab04d0a771e777944a41.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
0ff2d8e546d0198ff31290a2bbfdd0f74ef0e7076789ab04d0a771e777944a41
-
Size
35KB
-
MD5
08e24dc90e0469b438f318b91227e2ff
-
SHA1
5114d01696d64c8f4026cbeca3ca1f9dbfdade27
-
SHA256
0ff2d8e546d0198ff31290a2bbfdd0f74ef0e7076789ab04d0a771e777944a41
-
SHA512
b9e4f312cb0d4f066a1c30fc9d19d87442b56c152f6872f94a69c5a69ea9267dc0ea22dcd1b4de79d95d24d3045d368d009c5843f4b28901c339a377740028b8
-
SSDEEP
768:Dp9MaScKyZpS0AW2E+wgEiNSG/V/6SmUhi:DpHXS9EQNzp6SmUg
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-