Overview

overview

8

Static

static

4f1543abb6...40.exe

windows7-x64

8

4f1543abb6...40.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f1543abb6c70a02d18aa33c8f6d691bcc9b5a1e537f06712bfda5a09f629440

  • Size

    931KB

  • Sample

    221125-qmtgpaag98

  • MD5

    8f95818ea28d35e29cff18d2e59d8438

  • SHA1

    a50c9f29711b0c0e5f467ccd1fed737004c42f31

  • SHA256

    4f1543abb6c70a02d18aa33c8f6d691bcc9b5a1e537f06712bfda5a09f629440

  • SHA512

    3795203a577e32821ca36a48d9549825bf2eb4a0a8ad4c6261b1edbd68cb410eaaf865913f552bb58104ab0fa4893a036fd2540e4291bb752e576edd189e2a18

  • SSDEEP

    24576:C6IMwPvmB/wWq+5DUTt7FGSwmpu8nL6YK:C6j19rut7FoU56

Score
8/10
upx

Malware Config

Targets

    • Target

      4f1543abb6c70a02d18aa33c8f6d691bcc9b5a1e537f06712bfda5a09f629440

    • Size

      931KB

    • MD5

      8f95818ea28d35e29cff18d2e59d8438

    • SHA1

      a50c9f29711b0c0e5f467ccd1fed737004c42f31

    • SHA256

      4f1543abb6c70a02d18aa33c8f6d691bcc9b5a1e537f06712bfda5a09f629440

    • SHA512

      3795203a577e32821ca36a48d9549825bf2eb4a0a8ad4c6261b1edbd68cb410eaaf865913f552bb58104ab0fa4893a036fd2540e4291bb752e576edd189e2a18

    • SSDEEP

      24576:C6IMwPvmB/wWq+5DUTt7FGSwmpu8nL6YK:C6j19rut7FoU56

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks