General
-
Target
19efed081f95e2d54bd2261580c49e4e0a96378e9ef2ffcb69c48600b41a9768
-
Size
269KB
-
Sample
221126-2py1qsec9y
-
MD5
652cff0c8e9559836174208bbc4d30ac
-
SHA1
1d201e2ba05ea77830bb6d309934efd03870e169
-
SHA256
19efed081f95e2d54bd2261580c49e4e0a96378e9ef2ffcb69c48600b41a9768
-
SHA512
1064c866ca2b451dc94d7a609cde8382532ace465150fd4a4205b88ee1e25dc97628bccad0e54a5c6d43d0be00d5aff32be93eeada83f740c4c1528ec6204969
-
SSDEEP
6144:pAsBZEpJNN/wel76jWJqj4/ZTqUpS4G561nv:spJDH6UhmN56hv
Static task
static1
Behavioral task
behavioral1
Sample
19efed081f95e2d54bd2261580c49e4e0a96378e9ef2ffcb69c48600b41a9768.exe
Resource
win7-20221111-en
Malware Config
Targets
-
-
Target
19efed081f95e2d54bd2261580c49e4e0a96378e9ef2ffcb69c48600b41a9768
-
Size
269KB
-
MD5
652cff0c8e9559836174208bbc4d30ac
-
SHA1
1d201e2ba05ea77830bb6d309934efd03870e169
-
SHA256
19efed081f95e2d54bd2261580c49e4e0a96378e9ef2ffcb69c48600b41a9768
-
SHA512
1064c866ca2b451dc94d7a609cde8382532ace465150fd4a4205b88ee1e25dc97628bccad0e54a5c6d43d0be00d5aff32be93eeada83f740c4c1528ec6204969
-
SSDEEP
6144:pAsBZEpJNN/wel76jWJqj4/ZTqUpS4G561nv:spJDH6UhmN56hv
-
Modifies firewall policy service
-
Sets file execution options in registry
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-