Overview

overview

8

Static

static

3e03c0f34f...5b.exe

windows7-x64

8

3e03c0f34f...5b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e03c0f34ff7c3c1740385e361f7c625ab947fbb8737dec117a514b0172dc35b

  • Size

    931KB

  • Sample

    221125-rf7amsch89

  • MD5

    36a6d530bebccbf8524d3046ffc43150

  • SHA1

    129d6998723043a72709565a86866243210b5607

  • SHA256

    3e03c0f34ff7c3c1740385e361f7c625ab947fbb8737dec117a514b0172dc35b

  • SHA512

    d969d14bd4ca9f5c67c9841e352466976f52849633f1356edb5580759313d4248a57c83d1c8ea93959127068e3fe7a9bd9498bd9a08bc76c6436dd9b34e2430b

  • SSDEEP

    24576:C6IMwPvmB/wWq+5DUTt7FGSwmpu8nL6YKE:C6j19rut7FoU566

Score
8/10
upx

Malware Config

Targets

    • Target

      3e03c0f34ff7c3c1740385e361f7c625ab947fbb8737dec117a514b0172dc35b

    • Size

      931KB

    • MD5

      36a6d530bebccbf8524d3046ffc43150

    • SHA1

      129d6998723043a72709565a86866243210b5607

    • SHA256

      3e03c0f34ff7c3c1740385e361f7c625ab947fbb8737dec117a514b0172dc35b

    • SHA512

      d969d14bd4ca9f5c67c9841e352466976f52849633f1356edb5580759313d4248a57c83d1c8ea93959127068e3fe7a9bd9498bd9a08bc76c6436dd9b34e2430b

    • SSDEEP

      24576:C6IMwPvmB/wWq+5DUTt7FGSwmpu8nL6YKE:C6j19rut7FoU566

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks