Overview

overview

8

Static

static

bd29404335...a8.exe

windows7-x64

8

bd29404335...a8.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    bd29404335cf46e23688690d622417560305d6868b6498a1471bd93a7112cda8

  • Size

    3.7MB

  • Sample

    221127-ber7bshc35

  • MD5

    da6af186fde5d36e8bef4716d8545880

  • SHA1

    0602cffca612c365fbb43b91380a7de9583f983a

  • SHA256

    bd29404335cf46e23688690d622417560305d6868b6498a1471bd93a7112cda8

  • SHA512

    442e89de4cfdfde84b87b669af84dd41bf5b031d14f288fbacba04247464c0b37e2b1877c77e9e65a76904ecae17b335df9e48e40b7fd725942b795d175ee6bc

  • SSDEEP

    98304:3zJ9KXR5hDHH7p74VINSsH3Ty0Sei87sP0HMrwb5X:DJ9KXRnD7BLH3nSezsP0Z5X

Score
8/10
upx

Malware Config

Targets

    • Target

      bd29404335cf46e23688690d622417560305d6868b6498a1471bd93a7112cda8

    • Size

      3.7MB

    • MD5

      da6af186fde5d36e8bef4716d8545880

    • SHA1

      0602cffca612c365fbb43b91380a7de9583f983a

    • SHA256

      bd29404335cf46e23688690d622417560305d6868b6498a1471bd93a7112cda8

    • SHA512

      442e89de4cfdfde84b87b669af84dd41bf5b031d14f288fbacba04247464c0b37e2b1877c77e9e65a76904ecae17b335df9e48e40b7fd725942b795d175ee6bc

    • SSDEEP

      98304:3zJ9KXR5hDHH7p74VINSsH3Ty0Sei87sP0HMrwb5X:DJ9KXRnD7BLH3nSezsP0Z5X

    Score
    8/10
    upx

    • Blocklisted process makes network request

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks