Overview

overview

8

Static

static

8

bdf8527440...1a.exe

windows7-x64

8

bdf8527440...1a.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    bdf8527440e5ba27fa4bf6e409117a8bf317bafba1b080f2be2c7237dc6c0c1a

  • Size

    1.0MB

  • Sample

    221127-zrghcsch7s

  • MD5

    66c95fc90ddb8a9b3c53bc3893d88d2f

  • SHA1

    039c5ed05cf6d53f047920f290ceb8c98ff918d1

  • SHA256

    bdf8527440e5ba27fa4bf6e409117a8bf317bafba1b080f2be2c7237dc6c0c1a

  • SHA512

    6e667f90bec596c7061359a1e61dd832011731a582010c4a02c610e33fd9e8f7cfdc78b795ef5f34db28d9eb434bdac924014004f5ac5ea0966f93a2effd63b1

  • SSDEEP

    24576:7QqAkwwlUSvS3U2wb0aZTKzqCGw1L3v5dGjnA3Kby:7QqhqS32wIcTfQ3v5ok0y

Score
8/10
upx

Malware Config

Targets

    • Target

      bdf8527440e5ba27fa4bf6e409117a8bf317bafba1b080f2be2c7237dc6c0c1a

    • Size

      1.0MB

    • MD5

      66c95fc90ddb8a9b3c53bc3893d88d2f

    • SHA1

      039c5ed05cf6d53f047920f290ceb8c98ff918d1

    • SHA256

      bdf8527440e5ba27fa4bf6e409117a8bf317bafba1b080f2be2c7237dc6c0c1a

    • SHA512

      6e667f90bec596c7061359a1e61dd832011731a582010c4a02c610e33fd9e8f7cfdc78b795ef5f34db28d9eb434bdac924014004f5ac5ea0966f93a2effd63b1

    • SSDEEP

      24576:7QqAkwwlUSvS3U2wb0aZTKzqCGw1L3v5dGjnA3Kby:7QqhqS32wIcTfQ3v5ok0y

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks