Overview

overview

7

Static

static

7

6ad1789f0a...f1.exe

windows7-x64

7

6ad1789f0a...f1.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6ad1789f0a8487913f8c08a145d964582e8b32d90741c150c158e3d3a46886f1

  • Size

    1.2MB

  • Sample

    221205-jdll6aha73

  • MD5

    cf3c8e47c1df8e2f40439242ae14d23c

  • SHA1

    1dc5666cc570e6a15147ecef1b3ec2f0f736277a

  • SHA256

    6ad1789f0a8487913f8c08a145d964582e8b32d90741c150c158e3d3a46886f1

  • SHA512

    3a10827a14cd0c313e685ae52ae2d479023777d400823fd3516dd4bb7387d8b4459df006c4b07a47623b71165de6ab93b081f9c4fc37d2aff0fbc0f2555267e2

  • SSDEEP

    24576:isbilOzC6FRyp3wL9GtD8Iaywh1UueXUYlWaNlvaUTBejei:iqil4C63CyH1EXjXCUVri

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      6ad1789f0a8487913f8c08a145d964582e8b32d90741c150c158e3d3a46886f1

    • Size

      1.2MB

    • MD5

      cf3c8e47c1df8e2f40439242ae14d23c

    • SHA1

      1dc5666cc570e6a15147ecef1b3ec2f0f736277a

    • SHA256

      6ad1789f0a8487913f8c08a145d964582e8b32d90741c150c158e3d3a46886f1

    • SHA512

      3a10827a14cd0c313e685ae52ae2d479023777d400823fd3516dd4bb7387d8b4459df006c4b07a47623b71165de6ab93b081f9c4fc37d2aff0fbc0f2555267e2

    • SSDEEP

      24576:isbilOzC6FRyp3wL9GtD8Iaywh1UueXUYlWaNlvaUTBejei:iqil4C63CyH1EXjXCUVri

    Score
    7/10
    evasionthemida

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks