Overview

overview

7

Static

static

f819e8c37f...fe.exe

windows7-x64

7

f819e8c37f...fe.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f819e8c37f56f27ac8e0a9a7bdf743319679fdd5b4712a4f3b2ae8795e9452fe

  • Size

    1.1MB

  • Sample

    221126-t5h1fsca7x

  • MD5

    63a323e2aba577bae4994970c79e3e0c

  • SHA1

    9195a56c564a77f37d5d6fd75497f436b86dbe86

  • SHA256

    f819e8c37f56f27ac8e0a9a7bdf743319679fdd5b4712a4f3b2ae8795e9452fe

  • SHA512

    85cde181a4e890b5fc74328b1ed81d275db9c45787335dd31c8267b6444a0804d6cac236885bce9dbcf34498217c7ae98accfc91a9a70c78cb0252449b8c1d2d

  • SSDEEP

    12288:uuklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHe:u3jl2WzbZL6gEAqEVmA7x6FAnc

Score
7/10

Malware Config

Targets

    • Target

      f819e8c37f56f27ac8e0a9a7bdf743319679fdd5b4712a4f3b2ae8795e9452fe

    • Size

      1.1MB

    • MD5

      63a323e2aba577bae4994970c79e3e0c

    • SHA1

      9195a56c564a77f37d5d6fd75497f436b86dbe86

    • SHA256

      f819e8c37f56f27ac8e0a9a7bdf743319679fdd5b4712a4f3b2ae8795e9452fe

    • SHA512

      85cde181a4e890b5fc74328b1ed81d275db9c45787335dd31c8267b6444a0804d6cac236885bce9dbcf34498217c7ae98accfc91a9a70c78cb0252449b8c1d2d

    • SSDEEP

      12288:uuklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHe:u3jl2WzbZL6gEAqEVmA7x6FAnc

    Score
    7/10

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks