Overview

overview

7

Static

static

33a3b2384c...1f.exe

windows7-x64

7

33a3b2384c...1f.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33a3b2384cb70489d50a40fcfe6dccbd287e5fa239f54263df30779a32ca111f

  • Size

    933KB

  • Sample

    221126-e4v63aca44

  • MD5

    4bc98785c67373099116f165cdad667e

  • SHA1

    195dfda47b48d555f7abcbd0332f43dc35cc9245

  • SHA256

    33a3b2384cb70489d50a40fcfe6dccbd287e5fa239f54263df30779a32ca111f

  • SHA512

    e5a7130c58e3d1b23f41fa4eeba6ca0c1f984e94626acfeff5eff46cd40b9fc423c807463007c7753b1ff29adba99cf4f5b2686392159c2a9f55462f4d0dedf0

  • SSDEEP

    24576:llosaY5besRGLYVlnk6VY06tFlLomp6LWS/8c/mr:nosaY5beZLsr+0Sl6LWQ8m

Score
7/10
discovery

Malware Config

Targets

    • Target

      33a3b2384cb70489d50a40fcfe6dccbd287e5fa239f54263df30779a32ca111f

    • Size

      933KB

    • MD5

      4bc98785c67373099116f165cdad667e

    • SHA1

      195dfda47b48d555f7abcbd0332f43dc35cc9245

    • SHA256

      33a3b2384cb70489d50a40fcfe6dccbd287e5fa239f54263df30779a32ca111f

    • SHA512

      e5a7130c58e3d1b23f41fa4eeba6ca0c1f984e94626acfeff5eff46cd40b9fc423c807463007c7753b1ff29adba99cf4f5b2686392159c2a9f55462f4d0dedf0

    • SSDEEP

      24576:llosaY5besRGLYVlnk6VY06tFlLomp6LWS/8c/mr:nosaY5beZLsr+0Sl6LWQ8m

    Score
    7/10
    discovery

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

2
T1082

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks