Overview

overview

8

Static

static

a02e2980ee...46.exe

windows7-x64

8

a02e2980ee...46.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a02e2980ee9aa2f09d06d2483ef5aba11786f4d9e497853b441c16a5cbc96146

  • Size

    935KB

  • Sample

    221125-lya29shb58

  • MD5

    0003aa42aa8f2b980cf2884cf099f692

  • SHA1

    47b03ad2f37528436d053f1ae04cd00f74c8853a

  • SHA256

    a02e2980ee9aa2f09d06d2483ef5aba11786f4d9e497853b441c16a5cbc96146

  • SHA512

    d044936d2ddcfcc702d417d8e7f5110b6d9d6545921b9496c00f73e1f5b88ad9425d4435839896e10526bf58572759db48e59fb8107917e8df4a7cb0ebbf90f0

  • SSDEEP

    12288:Z5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4q:ZyHv5Z+Wzv7AiBll0OBWi6si9GL

Score
8/10
upx

Malware Config

Targets

    • Target

      a02e2980ee9aa2f09d06d2483ef5aba11786f4d9e497853b441c16a5cbc96146

    • Size

      935KB

    • MD5

      0003aa42aa8f2b980cf2884cf099f692

    • SHA1

      47b03ad2f37528436d053f1ae04cd00f74c8853a

    • SHA256

      a02e2980ee9aa2f09d06d2483ef5aba11786f4d9e497853b441c16a5cbc96146

    • SHA512

      d044936d2ddcfcc702d417d8e7f5110b6d9d6545921b9496c00f73e1f5b88ad9425d4435839896e10526bf58572759db48e59fb8107917e8df4a7cb0ebbf90f0

    • SSDEEP

      12288:Z5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4q:ZyHv5Z+Wzv7AiBll0OBWi6si9GL

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks