General
-
Target
397f36846160d9cde3aff86a91a6f58ed0f418d64fccf1c3e5a97438b38e9e55
-
Size
828KB
-
Sample
221126-e3tlvabh84
-
MD5
1c57e432be8b4cadf308b28de068e159
-
SHA1
70b3723c6ba6f81959aa77ca666099ffce7443db
-
SHA256
397f36846160d9cde3aff86a91a6f58ed0f418d64fccf1c3e5a97438b38e9e55
-
SHA512
c1e846d23a46d5357c86acd0c26c314f8870622ca87397c5611d24f079499ebc81f2e30439b15b848928df0a4b8d1a0d6bbfb1eda883f81f6a0565f38335a65a
-
SSDEEP
24576:WDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwPQ:GFhwFzPBYb02y4SA5MV
Static task
static1
Behavioral task
behavioral1
Sample
397f36846160d9cde3aff86a91a6f58ed0f418d64fccf1c3e5a97438b38e9e55.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
397f36846160d9cde3aff86a91a6f58ed0f418d64fccf1c3e5a97438b38e9e55.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
397f36846160d9cde3aff86a91a6f58ed0f418d64fccf1c3e5a97438b38e9e55
-
Size
828KB
-
MD5
1c57e432be8b4cadf308b28de068e159
-
SHA1
70b3723c6ba6f81959aa77ca666099ffce7443db
-
SHA256
397f36846160d9cde3aff86a91a6f58ed0f418d64fccf1c3e5a97438b38e9e55
-
SHA512
c1e846d23a46d5357c86acd0c26c314f8870622ca87397c5611d24f079499ebc81f2e30439b15b848928df0a4b8d1a0d6bbfb1eda883f81f6a0565f38335a65a
-
SSDEEP
24576:WDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwPQ:GFhwFzPBYb02y4SA5MV
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-