Overview

overview

9

Static

static

3

c1737f0d46...fe.exe

windows7-x64

9

c1737f0d46...fe.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    c1737f0d46ee79dfbecbc29cfbb50b1e6c1dff61585682d150cec131ee52dffe

  • Size

    2.7MB

  • Sample

    231014-c3qh3scb6z

  • MD5

    b68b2358f6d8ce60e22c2773d9e4e2f2

  • SHA1

    23886b9615c714dc6c89ea25f6b0b65292f4e7a0

  • SHA256

    c1737f0d46ee79dfbecbc29cfbb50b1e6c1dff61585682d150cec131ee52dffe

  • SHA512

    5dc61fc2ab0385e2d75e1ecfc87ff85dea048d12bbbbb558043dabe39ce74f99cf6d76e55d44cf8ea8528948550c8b79a07c70bb4d8d2607e265cffde9d32af2

  • SSDEEP

    49152:w4GRMcTILl9XORhquCL7yoVVAOsie4MgOG+ebN2yOsWYGeAvuPxNf55ZGOsNe:w4iIvXikyOCONiB65ZVzbZGO4e

Score
9/10
evasion

Malware Config

Targets

    • Target

      c1737f0d46ee79dfbecbc29cfbb50b1e6c1dff61585682d150cec131ee52dffe

    • Size

      2.7MB

    • MD5

      b68b2358f6d8ce60e22c2773d9e4e2f2

    • SHA1

      23886b9615c714dc6c89ea25f6b0b65292f4e7a0

    • SHA256

      c1737f0d46ee79dfbecbc29cfbb50b1e6c1dff61585682d150cec131ee52dffe

    • SHA512

      5dc61fc2ab0385e2d75e1ecfc87ff85dea048d12bbbbb558043dabe39ce74f99cf6d76e55d44cf8ea8528948550c8b79a07c70bb4d8d2607e265cffde9d32af2

    • SSDEEP

      49152:w4GRMcTILl9XORhquCL7yoVVAOsie4MgOG+ebN2yOsWYGeAvuPxNf55ZGOsNe:w4iIvXikyOCONiB65ZVzbZGO4e

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks