Overview

overview

8

Static

static

8

b82992dec3...56.exe

windows7-x64

8

b82992dec3...56.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    b82992dec3633909e5250dbce207d5b62f3fb1b79323d6ba019f75f8c7b9d256

  • Size

    828KB

  • Sample

    221203-wawdeaeh5s

  • MD5

    aaf1056265e415fdb0e2675044f0c689

  • SHA1

    3c955a7bcc7b3de726cfa27418993c6a8bed9d3c

  • SHA256

    b82992dec3633909e5250dbce207d5b62f3fb1b79323d6ba019f75f8c7b9d256

  • SHA512

    e32ce8d300e0b8d3b41445c81bbacfec1a9fd76664ab5c7de206619d6a1b242c0f63cbb90d21cb047aa3820855447f180bad1485eb8d35ae761e4ae81d4691d8

  • SSDEEP

    12288:YxfTFVrHJzInf20O3eGAf/7yNwQ0NN13nb8mjEJW++GN8tm43E56TU:AbtInfztfT8IP3nb8HW++6Qm4UL

Score
8/10
upx

Malware Config

Targets

    • Target

      b82992dec3633909e5250dbce207d5b62f3fb1b79323d6ba019f75f8c7b9d256

    • Size

      828KB

    • MD5

      aaf1056265e415fdb0e2675044f0c689

    • SHA1

      3c955a7bcc7b3de726cfa27418993c6a8bed9d3c

    • SHA256

      b82992dec3633909e5250dbce207d5b62f3fb1b79323d6ba019f75f8c7b9d256

    • SHA512

      e32ce8d300e0b8d3b41445c81bbacfec1a9fd76664ab5c7de206619d6a1b242c0f63cbb90d21cb047aa3820855447f180bad1485eb8d35ae761e4ae81d4691d8

    • SSDEEP

      12288:YxfTFVrHJzInf20O3eGAf/7yNwQ0NN13nb8mjEJW++GN8tm43E56TU:AbtInfztfT8IP3nb8HW++6Qm4UL

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks