General
-
Target
5dff3754878510b2e9489b4ff3d1c8754de3bb6b4c6c848e74a1b2204f29d2ed
-
Size
935KB
-
Sample
221125-pylesahb72
-
MD5
cf3c3d27df4763d43f75cf80c661281b
-
SHA1
9c12bb4eac64dc0b3189e3ea9d7c8d46be697877
-
SHA256
5dff3754878510b2e9489b4ff3d1c8754de3bb6b4c6c848e74a1b2204f29d2ed
-
SHA512
ee09e034fad796c6342b4ac8200402190cdc3895aba5c74f7d30048b3ff1978fb8f78fb174026eab61380fabb0e2cd553e3e033565ed29861a6b481f29744086
-
SSDEEP
12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x45:pyHv5Z+Wzv7AiBll0OBWi6si9GQ
Static task
static1
Behavioral task
behavioral1
Sample
5dff3754878510b2e9489b4ff3d1c8754de3bb6b4c6c848e74a1b2204f29d2ed.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5dff3754878510b2e9489b4ff3d1c8754de3bb6b4c6c848e74a1b2204f29d2ed.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
5dff3754878510b2e9489b4ff3d1c8754de3bb6b4c6c848e74a1b2204f29d2ed
-
Size
935KB
-
MD5
cf3c3d27df4763d43f75cf80c661281b
-
SHA1
9c12bb4eac64dc0b3189e3ea9d7c8d46be697877
-
SHA256
5dff3754878510b2e9489b4ff3d1c8754de3bb6b4c6c848e74a1b2204f29d2ed
-
SHA512
ee09e034fad796c6342b4ac8200402190cdc3895aba5c74f7d30048b3ff1978fb8f78fb174026eab61380fabb0e2cd553e3e033565ed29861a6b481f29744086
-
SSDEEP
12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x45:pyHv5Z+Wzv7AiBll0OBWi6si9GQ
Score8/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-