Overview

overview

8

Static

static

884aab3248...05.exe

windows7-x64

8

884aab3248...05.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    884aab3248a053f0e6a6680c08806675761acdc5191e3caade6b4d9c254c1405

  • Size

    935KB

  • Sample

    221125-m2m2nsfc9t

  • MD5

    1d3052dcde02e52f6ce358a261041cf9

  • SHA1

    4182b196f8b69d8372b23dd9c5fa6149f03dd9b9

  • SHA256

    884aab3248a053f0e6a6680c08806675761acdc5191e3caade6b4d9c254c1405

  • SHA512

    956a5ed97c18151529b7e5d0103ec19d46520968e9c153d9aa15278c5e28925222e0b1443869056c3ef2a35069dc41928e1830221425a9c25d879eeeba77ebb3

  • SSDEEP

    12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4+:pyHv5Z+Wzv7AiBll0OBWi6si9Gv

Score
8/10
upx

Malware Config

Targets

    • Target

      884aab3248a053f0e6a6680c08806675761acdc5191e3caade6b4d9c254c1405

    • Size

      935KB

    • MD5

      1d3052dcde02e52f6ce358a261041cf9

    • SHA1

      4182b196f8b69d8372b23dd9c5fa6149f03dd9b9

    • SHA256

      884aab3248a053f0e6a6680c08806675761acdc5191e3caade6b4d9c254c1405

    • SHA512

      956a5ed97c18151529b7e5d0103ec19d46520968e9c153d9aa15278c5e28925222e0b1443869056c3ef2a35069dc41928e1830221425a9c25d879eeeba77ebb3

    • SSDEEP

      12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4+:pyHv5Z+Wzv7AiBll0OBWi6si9Gv

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks