Overview

overview

8

Static

static

7ee228c6f5...7f.exe

windows7-x64

8

7ee228c6f5...7f.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    7ee228c6f51477e7bc56ded997d619e48be7d59da0bc02fa4ddd44c07143217f

  • Size

    935KB

  • Sample

    221125-nglhsage41

  • MD5

    d827f45df460a9d6f41df8dcf8f2d12d

  • SHA1

    23ad301f2f053d93b57817eb6a4f7707f9ef267e

  • SHA256

    7ee228c6f51477e7bc56ded997d619e48be7d59da0bc02fa4ddd44c07143217f

  • SHA512

    1cb82955bf7ce87f4af9ce41166d26ac1b5f4517962c60c83176a80af8fad0044eb0237aa6cdbb4a315a76a4fd551760654fc549df553e3054e4db82f06ab1ac

  • SSDEEP

    12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4u:IyHv5Z+Wzv7AiBll0OBWi6si9GD

Score
8/10
upx

Malware Config

Targets

    • Target

      7ee228c6f51477e7bc56ded997d619e48be7d59da0bc02fa4ddd44c07143217f

    • Size

      935KB

    • MD5

      d827f45df460a9d6f41df8dcf8f2d12d

    • SHA1

      23ad301f2f053d93b57817eb6a4f7707f9ef267e

    • SHA256

      7ee228c6f51477e7bc56ded997d619e48be7d59da0bc02fa4ddd44c07143217f

    • SHA512

      1cb82955bf7ce87f4af9ce41166d26ac1b5f4517962c60c83176a80af8fad0044eb0237aa6cdbb4a315a76a4fd551760654fc549df553e3054e4db82f06ab1ac

    • SSDEEP

      12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4u:IyHv5Z+Wzv7AiBll0OBWi6si9GD

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks