Overview

overview

9

Static

static

3

6ce1850728...67.exe

windows7-x64

1

6ce1850728...67.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    6ce18507285b7895c4977ffe4d191467.bin

  • Size

    768KB

  • Sample

    231125-cc8a7sfg55

  • MD5

    6ce18507285b7895c4977ffe4d191467

  • SHA1

    530a0e225f3fef812efd63149408e319d54d3930

  • SHA256

    0da3e9ea847551f3bad9b3d00fd8be0ce8134a589a0c6a9e2dc1929aae867d4c

  • SHA512

    5d01057db123098d1eded1a33a6210858d0ad7d76fdc19afc50b0aa3825bbff008bbc219782e0c23ccb545f500298bfd128a53af9a4c41cf93a449f1689fe4ec

  • SSDEEP

    12288:EavyGiW6EEdATD7vx7jIuGUFOB3FdShtJZthEdQ0F+GLVeKjzbUxWQwQ6PmPgIrw:EPG7dTHdXe3FEhHhstFVLDjQGmPgw+KS

Score
9/10
evasion

Malware Config

Targets

    • Target

      6ce18507285b7895c4977ffe4d191467.bin

    • Size

      768KB

    • MD5

      6ce18507285b7895c4977ffe4d191467

    • SHA1

      530a0e225f3fef812efd63149408e319d54d3930

    • SHA256

      0da3e9ea847551f3bad9b3d00fd8be0ce8134a589a0c6a9e2dc1929aae867d4c

    • SHA512

      5d01057db123098d1eded1a33a6210858d0ad7d76fdc19afc50b0aa3825bbff008bbc219782e0c23ccb545f500298bfd128a53af9a4c41cf93a449f1689fe4ec

    • SSDEEP

      12288:EavyGiW6EEdATD7vx7jIuGUFOB3FdShtJZthEdQ0F+GLVeKjzbUxWQwQ6PmPgIrw:EPG7dTHdXe3FEhHhstFVLDjQGmPgw+KS

    Score
    9/10
    evasion

    • Looks for VirtualBox Guest Additions in registry

      evasion

    • Looks for VMWare Tools registry key

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks