Overview

overview

8

Static

static

0e5b1a5228...73.exe

windows7-x64

8

0e5b1a5228...73.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e5b1a5228ad7a6816f9d2aa69e71a78f38b58a046f5d69b6e3ce6c1e3cf8573

  • Size

    935KB

  • Sample

    221125-tnjknaac96

  • MD5

    48d71a0c9437b17a16ded513a8898f74

  • SHA1

    57fe6a1066516ed3ec8cfff6fe0ad4bd41e7a9b6

  • SHA256

    0e5b1a5228ad7a6816f9d2aa69e71a78f38b58a046f5d69b6e3ce6c1e3cf8573

  • SHA512

    7a809811c09f4a968fb00fff61b9d62007bf8e996652119a0030d727d98983dd773198a3f140dbb4ae4a7055210ccfafbcaa19c3063b9fd6d1372925d198fccf

  • SSDEEP

    12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:JyHv5Z+Wzv7AiBll0OBWi6si9G

Score
8/10
upx

Malware Config

Targets

    • Target

      0e5b1a5228ad7a6816f9d2aa69e71a78f38b58a046f5d69b6e3ce6c1e3cf8573

    • Size

      935KB

    • MD5

      48d71a0c9437b17a16ded513a8898f74

    • SHA1

      57fe6a1066516ed3ec8cfff6fe0ad4bd41e7a9b6

    • SHA256

      0e5b1a5228ad7a6816f9d2aa69e71a78f38b58a046f5d69b6e3ce6c1e3cf8573

    • SHA512

      7a809811c09f4a968fb00fff61b9d62007bf8e996652119a0030d727d98983dd773198a3f140dbb4ae4a7055210ccfafbcaa19c3063b9fd6d1372925d198fccf

    • SSDEEP

      12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:JyHv5Z+Wzv7AiBll0OBWi6si9G

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks