Overview

overview

9

Static

static

8

be51ac9b52...6f.exe

windows7-x64

9

be51ac9b52...6f.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    be51ac9b52c6cb0b550bcd7abcc80898198607cb32b29a793b9add0621127a6f

  • Size

    487KB

  • Sample

    221203-gtn14sah88

  • MD5

    485c8acdddb42852223d5200c1c3079b

  • SHA1

    aed7db41884b21af53848a6f28cdfb0874b8f176

  • SHA256

    be51ac9b52c6cb0b550bcd7abcc80898198607cb32b29a793b9add0621127a6f

  • SHA512

    7ceac9caa3696f05f5ae79e34cf689d424cc130c607f03ff692d78bb0ba11c5b79ec77712cf00e3ae797cc1016e4db87dfdbc1ad03a36746bd2356c96a5fc155

  • SSDEEP

    12288:/VWwUOhKY388dLmxQczbC5R8+piq75g/TTWEXlTQ:/VWLO5MUoC5RUvrT1XS

Score
9/10
evasionupx

Malware Config

Targets

    • Target

      be51ac9b52c6cb0b550bcd7abcc80898198607cb32b29a793b9add0621127a6f

    • Size

      487KB

    • MD5

      485c8acdddb42852223d5200c1c3079b

    • SHA1

      aed7db41884b21af53848a6f28cdfb0874b8f176

    • SHA256

      be51ac9b52c6cb0b550bcd7abcc80898198607cb32b29a793b9add0621127a6f

    • SHA512

      7ceac9caa3696f05f5ae79e34cf689d424cc130c607f03ff692d78bb0ba11c5b79ec77712cf00e3ae797cc1016e4db87dfdbc1ad03a36746bd2356c96a5fc155

    • SSDEEP

      12288:/VWwUOhKY388dLmxQczbC5R8+piq75g/TTWEXlTQ:/VWLO5MUoC5RUvrT1XS

    Score
    9/10
    evasionupx

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks