General
-
Target
8c97df2ada1b9b229bbeaddf77a8d3e9d5e6033f596230f4354be4fd6dda833c
-
Size
535KB
-
Sample
221201-bh5xlabb97
-
MD5
93d9b292cd63f1ea011ef3b4febf1306
-
SHA1
f8ca7a07711f31721c10e815e56d5481aae2649f
-
SHA256
8c97df2ada1b9b229bbeaddf77a8d3e9d5e6033f596230f4354be4fd6dda833c
-
SHA512
ccc5a72f7ef4d2899111064eba2305469d65ef5b67f88b667ac1b6f32dfd0eca2458e02059b761a4df26bcca2db49a357cd0b9919747e7553da6d60bddd70f82
-
SSDEEP
12288:Lvl9eg1DTCchbfP5u97nK84KrJJKlHqVPZyf9QQnahxJCPTbE672l:zlwEThuTeKz/QTV
Static task
static1
Behavioral task
behavioral1
Sample
8c97df2ada1b9b229bbeaddf77a8d3e9d5e6033f596230f4354be4fd6dda833c.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
8c97df2ada1b9b229bbeaddf77a8d3e9d5e6033f596230f4354be4fd6dda833c
-
Size
535KB
-
MD5
93d9b292cd63f1ea011ef3b4febf1306
-
SHA1
f8ca7a07711f31721c10e815e56d5481aae2649f
-
SHA256
8c97df2ada1b9b229bbeaddf77a8d3e9d5e6033f596230f4354be4fd6dda833c
-
SHA512
ccc5a72f7ef4d2899111064eba2305469d65ef5b67f88b667ac1b6f32dfd0eca2458e02059b761a4df26bcca2db49a357cd0b9919747e7553da6d60bddd70f82
-
SSDEEP
12288:Lvl9eg1DTCchbfP5u97nK84KrJJKlHqVPZyf9QQnahxJCPTbE672l:zlwEThuTeKz/QTV
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-