Overview

overview

8

Static

static

9981378c31...ea.exe

windows7-x64

8

9981378c31...ea.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    9981378c3100eae0f0a4eab6699270175e86561cd9a40ba423a63b8ef0a8c0ea

  • Size

    172KB

  • Sample

    221129-tgxtpsde28

  • MD5

    612d46782383a35b7d1ed19073498288

  • SHA1

    004be62e0fb606a14a3567872047548728d2a7bc

  • SHA256

    9981378c3100eae0f0a4eab6699270175e86561cd9a40ba423a63b8ef0a8c0ea

  • SHA512

    b036dc9c79423134bc57408d3f77608729f21b4608a1c53575eb1c296e05b833da85326c64b5317e2917df21acf46c5d25f9baf3d072283029898fd4c3f44d93

  • SSDEEP

    3072:7H69DiMTdgP6RvRP5VwYznpDBrvWwvbSlJHy/r/zMJmd7DcNXj:Oh3CSR1Q6LrvNvySj/zCgD6

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      9981378c3100eae0f0a4eab6699270175e86561cd9a40ba423a63b8ef0a8c0ea

    • Size

      172KB

    • MD5

      612d46782383a35b7d1ed19073498288

    • SHA1

      004be62e0fb606a14a3567872047548728d2a7bc

    • SHA256

      9981378c3100eae0f0a4eab6699270175e86561cd9a40ba423a63b8ef0a8c0ea

    • SHA512

      b036dc9c79423134bc57408d3f77608729f21b4608a1c53575eb1c296e05b833da85326c64b5317e2917df21acf46c5d25f9baf3d072283029898fd4c3f44d93

    • SSDEEP

      3072:7H69DiMTdgP6RvRP5VwYznpDBrvWwvbSlJHy/r/zMJmd7DcNXj:Oh3CSR1Q6LrvNvySj/zCgD6

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • Modifies AppInit DLL entries

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks