Overview

overview

8

Static

static

bf8ef6f462...f0.exe

windows7-x64

8

bf8ef6f462...f0.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf8ef6f462b1ee42021554969ef0aa410b2d96268e5eb832f1c91832252323f0

  • Size

    935KB

  • Sample

    221125-kgxz2ahd51

  • MD5

    4d176c2c9c11a7d076d06342f1ca177e

  • SHA1

    005f4b92ef2b449deecedb0484fe5bac4ae949b9

  • SHA256

    bf8ef6f462b1ee42021554969ef0aa410b2d96268e5eb832f1c91832252323f0

  • SHA512

    4f92ea4be7d4e338b00ffe809884746a6f7136d5a3735d6e47e6b8008dbea5fbe2bef94b26405ec6aa92118949a2f502d23aab5a4d736f8333adf4300b8ae47a

  • SSDEEP

    12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4S:IyHv5Z+Wzv7AiBll0OBWi6si9Gr

Score
8/10
upx

Malware Config

Targets

    • Target

      bf8ef6f462b1ee42021554969ef0aa410b2d96268e5eb832f1c91832252323f0

    • Size

      935KB

    • MD5

      4d176c2c9c11a7d076d06342f1ca177e

    • SHA1

      005f4b92ef2b449deecedb0484fe5bac4ae949b9

    • SHA256

      bf8ef6f462b1ee42021554969ef0aa410b2d96268e5eb832f1c91832252323f0

    • SHA512

      4f92ea4be7d4e338b00ffe809884746a6f7136d5a3735d6e47e6b8008dbea5fbe2bef94b26405ec6aa92118949a2f502d23aab5a4d736f8333adf4300b8ae47a

    • SSDEEP

      12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4S:IyHv5Z+Wzv7AiBll0OBWi6si9Gr

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks