Overview

overview

8

Static

static

8

d06d71c0ff...6c.exe

windows7-x64

8

d06d71c0ff...6c.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    d06d71c0ffcec4626062d8b15f45aed1911563e118a09d24e31d3384047d766c

  • Size

    1.0MB

  • Sample

    221127-2l6amshg5y

  • MD5

    24cfa0f56d2070dab8b31809c9874570

  • SHA1

    a367dc77d64aa20c47e5660262d5913e0cd3c4a2

  • SHA256

    d06d71c0ffcec4626062d8b15f45aed1911563e118a09d24e31d3384047d766c

  • SHA512

    521004d8072654d4fa2771b0e0af0aa3060c0a65095245f35cf48860da126ff211e61bc9aaaa9f900fe58bc36880e6e5f86f2fbdbc0e3a3e93eee67d94fa7484

  • SSDEEP

    24576:LQqAkwwlUSvS3U2wb0aZTKzqCGw1L3v5dGjnA3Kbd:LQqhqS32wIcTfQ3v5ok0d

Score
8/10
upx

Malware Config

Targets

    • Target

      d06d71c0ffcec4626062d8b15f45aed1911563e118a09d24e31d3384047d766c

    • Size

      1.0MB

    • MD5

      24cfa0f56d2070dab8b31809c9874570

    • SHA1

      a367dc77d64aa20c47e5660262d5913e0cd3c4a2

    • SHA256

      d06d71c0ffcec4626062d8b15f45aed1911563e118a09d24e31d3384047d766c

    • SHA512

      521004d8072654d4fa2771b0e0af0aa3060c0a65095245f35cf48860da126ff211e61bc9aaaa9f900fe58bc36880e6e5f86f2fbdbc0e3a3e93eee67d94fa7484

    • SSDEEP

      24576:LQqAkwwlUSvS3U2wb0aZTKzqCGw1L3v5dGjnA3Kbd:LQqhqS32wIcTfQ3v5ok0d

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks