General
-
Target
385363e379532c4f558f18ede8d7ce297865f419ed639526ca090a03e0e503b7
-
Size
828KB
-
Sample
221126-e311xsbh93
-
MD5
caf4f2c4004d753e87e5e5e15d01d191
-
SHA1
90ac69eadf29de5b0db6ef3658ca7437174e118f
-
SHA256
385363e379532c4f558f18ede8d7ce297865f419ed639526ca090a03e0e503b7
-
SHA512
d752c81a53a3b7989c1e2a5ae7a67c612995e667b739407f611b4add9b9ff06664d7f37b437e5f1375808b60ccec0d513a8dab12c2b569fb27718b6c2dedb786
-
SSDEEP
24576:PDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwPt:LFhwFzPBYb02y4SA5MQ
Static task
static1
Behavioral task
behavioral1
Sample
385363e379532c4f558f18ede8d7ce297865f419ed639526ca090a03e0e503b7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
385363e379532c4f558f18ede8d7ce297865f419ed639526ca090a03e0e503b7.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
385363e379532c4f558f18ede8d7ce297865f419ed639526ca090a03e0e503b7
-
Size
828KB
-
MD5
caf4f2c4004d753e87e5e5e15d01d191
-
SHA1
90ac69eadf29de5b0db6ef3658ca7437174e118f
-
SHA256
385363e379532c4f558f18ede8d7ce297865f419ed639526ca090a03e0e503b7
-
SHA512
d752c81a53a3b7989c1e2a5ae7a67c612995e667b739407f611b4add9b9ff06664d7f37b437e5f1375808b60ccec0d513a8dab12c2b569fb27718b6c2dedb786
-
SSDEEP
24576:PDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwPt:LFhwFzPBYb02y4SA5MQ
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-