Overview

overview

8

Static

static

6443556607...f4.exe

windows7-x64

8

6443556607...f4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6443556607f07217e691bb62649b790fe18c6f8abeb9a2d79aa3475cdc103ef4

  • Size

    935KB

  • Sample

    221125-ppdctage42

  • MD5

    9dadc886378cb277cb63565bf9ea1122

  • SHA1

    656290b52b68ee65d56bebb70e301f73cc47130b

  • SHA256

    6443556607f07217e691bb62649b790fe18c6f8abeb9a2d79aa3475cdc103ef4

  • SHA512

    c2c4554d517125ed16225c3dbf86065c8cb1e05b7f465b7bf6519ae25a29f9dabf59f7fe21e5dbb78542e2cd7323d8f2f025813bbf71138a927c0628249a399d

  • SSDEEP

    12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4A:IyHv5Z+Wzv7AiBll0OBWi6si9GN

Score
8/10
upx

Malware Config

Targets

    • Target

      6443556607f07217e691bb62649b790fe18c6f8abeb9a2d79aa3475cdc103ef4

    • Size

      935KB

    • MD5

      9dadc886378cb277cb63565bf9ea1122

    • SHA1

      656290b52b68ee65d56bebb70e301f73cc47130b

    • SHA256

      6443556607f07217e691bb62649b790fe18c6f8abeb9a2d79aa3475cdc103ef4

    • SHA512

      c2c4554d517125ed16225c3dbf86065c8cb1e05b7f465b7bf6519ae25a29f9dabf59f7fe21e5dbb78542e2cd7323d8f2f025813bbf71138a927c0628249a399d

    • SSDEEP

      12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4A:IyHv5Z+Wzv7AiBll0OBWi6si9GN

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks