Overview

overview

8

Static

static

0432202c8a...47.exe

windows7-x64

8

0432202c8a...47.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    0432202c8a58fed223fefa54ba39c0f63f2d858c8011201acc208d6ee9682147

  • Size

    935KB

  • Sample

    221125-t6hq3see2v

  • MD5

    18ef9c8b387b70732812d5e52b3853ac

  • SHA1

    59f5bb1a3a3403f6484001fb8a7654ea6ad139e1

  • SHA256

    0432202c8a58fed223fefa54ba39c0f63f2d858c8011201acc208d6ee9682147

  • SHA512

    6dca5957dcefd40d564bbe5128baf4007dcd2fc54a6a62db80332c8c22a35d0f72eb6ea52cc079bbb9c3d2d8968ba81ec614186d3dbe54a6a4f111c8b9f71c74

  • SSDEEP

    12288:Z5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4G:ZyHv5Z+Wzv7AiBll0OBWi6si9Gb

Score
8/10
upx

Malware Config

Targets

    • Target

      0432202c8a58fed223fefa54ba39c0f63f2d858c8011201acc208d6ee9682147

    • Size

      935KB

    • MD5

      18ef9c8b387b70732812d5e52b3853ac

    • SHA1

      59f5bb1a3a3403f6484001fb8a7654ea6ad139e1

    • SHA256

      0432202c8a58fed223fefa54ba39c0f63f2d858c8011201acc208d6ee9682147

    • SHA512

      6dca5957dcefd40d564bbe5128baf4007dcd2fc54a6a62db80332c8c22a35d0f72eb6ea52cc079bbb9c3d2d8968ba81ec614186d3dbe54a6a4f111c8b9f71c74

    • SSDEEP

      12288:Z5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4G:ZyHv5Z+Wzv7AiBll0OBWi6si9Gb

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks