Overview

overview

8

Static

static

8e1f45ac29...b6.exe

windows7-x64

8

8e1f45ac29...b6.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    8e1f45ac29f43c6ed724c3e28392f58185214c539fbb7f475455870389aecfb6

  • Size

    153KB

  • Sample

    221206-wfvdasdb2t

  • MD5

    3a15730e6aaad27fd6216c4b51a1a6d0

  • SHA1

    f9aeeed7e5c7c82eca685ccf4355aae72e98512e

  • SHA256

    8e1f45ac29f43c6ed724c3e28392f58185214c539fbb7f475455870389aecfb6

  • SHA512

    b0828df03004bf34bd8810e0a6196f732f2a3f768ca4db0cecb64d0d54920f12cf3e4dbaa57e9960f810425fa26416df39edaab4949431ff85284073653bc5b9

  • SSDEEP

    3072:LfPAZXZm6JOE4lZXfjg0YVwmluH5hP7KBVFUAuX8tCJt5uHA92W:Lfwh4rje7ghPgFg6gMHA92

Score
8/10

Malware Config

Targets

    • Target

      8e1f45ac29f43c6ed724c3e28392f58185214c539fbb7f475455870389aecfb6

    • Size

      153KB

    • MD5

      3a15730e6aaad27fd6216c4b51a1a6d0

    • SHA1

      f9aeeed7e5c7c82eca685ccf4355aae72e98512e

    • SHA256

      8e1f45ac29f43c6ed724c3e28392f58185214c539fbb7f475455870389aecfb6

    • SHA512

      b0828df03004bf34bd8810e0a6196f732f2a3f768ca4db0cecb64d0d54920f12cf3e4dbaa57e9960f810425fa26416df39edaab4949431ff85284073653bc5b9

    • SSDEEP

      3072:LfPAZXZm6JOE4lZXfjg0YVwmluH5hP7KBVFUAuX8tCJt5uHA92W:Lfwh4rje7ghPgFg6gMHA92

    Score
    8/10

    • Executes dropped EXE

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks