Overview

overview

8

Static

static

8

f8e288a1ff...61.exe

windows7-x64

8

f8e288a1ff...61.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    f8e288a1ff8676c4f1aae6d1afb050f5042882520fae10bcf413c88f918b3261

  • Size

    46KB

  • Sample

    221201-tehxrsdh82

  • MD5

    0e5934c1e6f051046c3274afa7c46cd9

  • SHA1

    fd1a59500da84ecd506e57322438cc14cc955430

  • SHA256

    f8e288a1ff8676c4f1aae6d1afb050f5042882520fae10bcf413c88f918b3261

  • SHA512

    b0c66f7ed46ed93cb679c00172a11f4637e04b01a45227e39d46867c96d88b282dcabf37566c2f82fba6e2bd693182e968019cc4ba134e9fbe6b41ef9aa3dcd3

  • SSDEEP

    768:wpsFxQWjsve3coUN45YjDfCj+rHbB1nLJHwcHaO/cAqiYet:57fI2sbU2w+nB1LpwcHaYBzt

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      f8e288a1ff8676c4f1aae6d1afb050f5042882520fae10bcf413c88f918b3261

    • Size

      46KB

    • MD5

      0e5934c1e6f051046c3274afa7c46cd9

    • SHA1

      fd1a59500da84ecd506e57322438cc14cc955430

    • SHA256

      f8e288a1ff8676c4f1aae6d1afb050f5042882520fae10bcf413c88f918b3261

    • SHA512

      b0c66f7ed46ed93cb679c00172a11f4637e04b01a45227e39d46867c96d88b282dcabf37566c2f82fba6e2bd693182e968019cc4ba134e9fbe6b41ef9aa3dcd3

    • SSDEEP

      768:wpsFxQWjsve3coUN45YjDfCj+rHbB1nLJHwcHaO/cAqiYet:57fI2sbU2w+nB1LpwcHaYBzt

    Score
    8/10
    persistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks