Overview

overview

8

Static

static

b95792a88f...b3.exe

windows7-x64

8

b95792a88f...b3.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b95792a88f77156cc40a6d64e13ae4f4dbdc79914ce7e4a614609a04851471b3

  • Size

    931KB

  • Sample

    221125-krx3saaa61

  • MD5

    99f60d1f788d8ababc855a3a4c7cc9e0

  • SHA1

    54e4051fe1b217bc28ee34ae72361fa1eb700716

  • SHA256

    b95792a88f77156cc40a6d64e13ae4f4dbdc79914ce7e4a614609a04851471b3

  • SHA512

    3381eb3ef6f0c8eea2cda8f5b77695003292a4b428292f5c2a6d6952e61739f92ddbfa80f613848fd596e0daa2439c9e19ed508fde06f299549e869f4d6ba66b

  • SSDEEP

    24576:i6IMwPvmB/wWq+5DUTt7FGSwmpu8nL6YK:i6j19rut7FoU56

Score
8/10
upx

Malware Config

Targets

    • Target

      b95792a88f77156cc40a6d64e13ae4f4dbdc79914ce7e4a614609a04851471b3

    • Size

      931KB

    • MD5

      99f60d1f788d8ababc855a3a4c7cc9e0

    • SHA1

      54e4051fe1b217bc28ee34ae72361fa1eb700716

    • SHA256

      b95792a88f77156cc40a6d64e13ae4f4dbdc79914ce7e4a614609a04851471b3

    • SHA512

      3381eb3ef6f0c8eea2cda8f5b77695003292a4b428292f5c2a6d6952e61739f92ddbfa80f613848fd596e0daa2439c9e19ed508fde06f299549e869f4d6ba66b

    • SSDEEP

      24576:i6IMwPvmB/wWq+5DUTt7FGSwmpu8nL6YK:i6j19rut7FoU56

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks