Overview

overview

8

Static

static

044a76ed5a...d4.exe

windows7-x64

8

044a76ed5a...d4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    044a76ed5af20a7b6bcd3f70d80f1a859be6204511de968682bf69e69da3a3d4

  • Size

    935KB

  • Sample

    221125-t6bb1aed9x

  • MD5

    31d71f0858e975376d31a6d069bdf395

  • SHA1

    fd555a933272b3c213779cffe58619e95aa4970f

  • SHA256

    044a76ed5af20a7b6bcd3f70d80f1a859be6204511de968682bf69e69da3a3d4

  • SHA512

    af87f6b3189b29f524a9fa6392fa1b1c7ca9b8c72d56fdae6499ec4d68fdbca28fb154000b436897521fcd66e862bb7537140ff559b0e1015099e939bf270d0f

  • SSDEEP

    12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4q:pyHv5Z+Wzv7AiBll0OBWi6si9Gz

Score
8/10
upx

Malware Config

Targets

    • Target

      044a76ed5af20a7b6bcd3f70d80f1a859be6204511de968682bf69e69da3a3d4

    • Size

      935KB

    • MD5

      31d71f0858e975376d31a6d069bdf395

    • SHA1

      fd555a933272b3c213779cffe58619e95aa4970f

    • SHA256

      044a76ed5af20a7b6bcd3f70d80f1a859be6204511de968682bf69e69da3a3d4

    • SHA512

      af87f6b3189b29f524a9fa6392fa1b1c7ca9b8c72d56fdae6499ec4d68fdbca28fb154000b436897521fcd66e862bb7537140ff559b0e1015099e939bf270d0f

    • SSDEEP

      12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4q:pyHv5Z+Wzv7AiBll0OBWi6si9Gz

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks