Overview

overview

8

Static

static

0b13cba331...97.exe

windows7-x64

8

0b13cba331...97.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b13cba3317a01731ab6ef77694393b9a1c7092912f6e2e177bf13303ff7ef97

  • Size

    935KB

  • Sample

    221125-ttm52aaf79

  • MD5

    eede468c6fdf2d289eb25d84169d15b9

  • SHA1

    7a27093511763936fdd3862c34f719a1d93da439

  • SHA256

    0b13cba3317a01731ab6ef77694393b9a1c7092912f6e2e177bf13303ff7ef97

  • SHA512

    4cf308feac1fc3a49bc6d7ab7465bc93ce7a0dc634df1f195cc32ca70b5ea684a81d1b8907bc13bd5881c052a208ee1c92489251264082bab95dda2aa3239d0d

  • SSDEEP

    12288:Y5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:YyHv5Z+Wzv7AiBll0OBWi6si9G

Score
8/10
upx

Malware Config

Targets

    • Target

      0b13cba3317a01731ab6ef77694393b9a1c7092912f6e2e177bf13303ff7ef97

    • Size

      935KB

    • MD5

      eede468c6fdf2d289eb25d84169d15b9

    • SHA1

      7a27093511763936fdd3862c34f719a1d93da439

    • SHA256

      0b13cba3317a01731ab6ef77694393b9a1c7092912f6e2e177bf13303ff7ef97

    • SHA512

      4cf308feac1fc3a49bc6d7ab7465bc93ce7a0dc634df1f195cc32ca70b5ea684a81d1b8907bc13bd5881c052a208ee1c92489251264082bab95dda2aa3239d0d

    • SSDEEP

      12288:Y5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:YyHv5Z+Wzv7AiBll0OBWi6si9G

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks