Overview

overview

8

Static

static

bf92decb8f...de.exe

windows7-x64

8

bf92decb8f...de.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    bf92decb8fab19e1d71f30961b6e5f78d45638080b8e4afcb6814f3e16c8f4de

  • Size

    935KB

  • Sample

    221125-kgwf7shd5z

  • MD5

    dac0e8dfc262e0fed118db58a847ea7b

  • SHA1

    f15aac158bb9e4ce227dffafadeffb214faec668

  • SHA256

    bf92decb8fab19e1d71f30961b6e5f78d45638080b8e4afcb6814f3e16c8f4de

  • SHA512

    787b7bf0e904133452271d5271e8ac6e7ef6f3ad3ee6ec882d0ecdb51a83d9773169502cd9f12126b7ecae86ff6381c5ec768cc1d934f75cf77a5e0c27604ff8

  • SSDEEP

    12288:Z5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4N:ZyHv5Z+Wzv7AiBll0OBWi6si9GI

Score
8/10
upx

Malware Config

Targets

    • Target

      bf92decb8fab19e1d71f30961b6e5f78d45638080b8e4afcb6814f3e16c8f4de

    • Size

      935KB

    • MD5

      dac0e8dfc262e0fed118db58a847ea7b

    • SHA1

      f15aac158bb9e4ce227dffafadeffb214faec668

    • SHA256

      bf92decb8fab19e1d71f30961b6e5f78d45638080b8e4afcb6814f3e16c8f4de

    • SHA512

      787b7bf0e904133452271d5271e8ac6e7ef6f3ad3ee6ec882d0ecdb51a83d9773169502cd9f12126b7ecae86ff6381c5ec768cc1d934f75cf77a5e0c27604ff8

    • SSDEEP

      12288:Z5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4N:ZyHv5Z+Wzv7AiBll0OBWi6si9GI

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks