Overview

overview

7

Static

static

4ce68abc63...38.exe

windows7-x64

7

4ce68abc63...38.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ce68abc633a76eb4239a436951e29d9187e76203142849b1d8a048f98f22538

  • Size

    828KB

  • Sample

    221126-eyy1rseh6x

  • MD5

    0e962cbba2373a716862d4289c92e25b

  • SHA1

    134c7fe56aff7b39e7702f47eacfddbadccdcb04

  • SHA256

    4ce68abc633a76eb4239a436951e29d9187e76203142849b1d8a048f98f22538

  • SHA512

    349fb21a0f23245bc6b23ba54e0d7bd44e20e876c9a4cb5407223276c7b5cf353fbec56003944a89c358bf96e835417c9ac5e95854d667808b845a644a3a0bf1

  • SSDEEP

    24576:wDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwP:MFhwFzPBYb02y4SA5M

Score
7/10
discovery

Malware Config

Targets

    • Target

      4ce68abc633a76eb4239a436951e29d9187e76203142849b1d8a048f98f22538

    • Size

      828KB

    • MD5

      0e962cbba2373a716862d4289c92e25b

    • SHA1

      134c7fe56aff7b39e7702f47eacfddbadccdcb04

    • SHA256

      4ce68abc633a76eb4239a436951e29d9187e76203142849b1d8a048f98f22538

    • SHA512

      349fb21a0f23245bc6b23ba54e0d7bd44e20e876c9a4cb5407223276c7b5cf353fbec56003944a89c358bf96e835417c9ac5e95854d667808b845a644a3a0bf1

    • SSDEEP

      24576:wDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwP:MFhwFzPBYb02y4SA5M

    Score
    7/10
    discovery

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

5
T1012

System Information Discovery

4
T1082

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks