Overview

overview

9

Static

static

3

1baedf74e5...a1.exe

windows7-x64

1

1baedf74e5...a1.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1baedf74e596b7fb30a0180fde5c0da1

  • Size

    139KB

  • Sample

    231225-ad9vbaach7

  • MD5

    1baedf74e596b7fb30a0180fde5c0da1

  • SHA1

    cd45f5f0d7a10f542a66428d9d06b207ee5bcb7e

  • SHA256

    614b7b91d69bf18f5a2cc2543dd3f4b508da8c4c4dfe4050f510a04182d0c0d5

  • SHA512

    563ad60f5e2983a83f78dbf5f5ebdcacd225a45e6c5022f6f524165d0c415a6435680949cfb0a2ae5d393dc361de001ac2494ec8a152a0e19484a47bb2514b66

  • SSDEEP

    3072:NjvYJwV2Hua0+2n/0L1hs0e8hjxTl1ao7dR6Bn:NjvYJwso+2n8jzeQT1D5Ml

Score
9/10
evasion

Malware Config

Targets

    • Target

      1baedf74e596b7fb30a0180fde5c0da1

    • Size

      139KB

    • MD5

      1baedf74e596b7fb30a0180fde5c0da1

    • SHA1

      cd45f5f0d7a10f542a66428d9d06b207ee5bcb7e

    • SHA256

      614b7b91d69bf18f5a2cc2543dd3f4b508da8c4c4dfe4050f510a04182d0c0d5

    • SHA512

      563ad60f5e2983a83f78dbf5f5ebdcacd225a45e6c5022f6f524165d0c415a6435680949cfb0a2ae5d393dc361de001ac2494ec8a152a0e19484a47bb2514b66

    • SSDEEP

      3072:NjvYJwV2Hua0+2n/0L1hs0e8hjxTl1ao7dR6Bn:NjvYJwso+2n8jzeQT1D5Ml

    Score
    9/10
    evasion

    • Looks for VirtualBox Guest Additions in registry

      evasion

    • Modifies RDP port number used by Windows

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks