Overview

overview

9

Static

static

3

aa9f56796c...b3.exe

windows7-x64

9

aa9f56796c...b3.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    aa9f56796c2e491f1f124828b0a576b3

  • Size

    710KB

  • Sample

    240228-bjzrzafg2v

  • MD5

    aa9f56796c2e491f1f124828b0a576b3

  • SHA1

    a2defea410fdbd4848f69ab7255e343c711ef41d

  • SHA256

    e05882b87499e78a2e13f252aef192960bf8ffb54ea2328f525069376b8604f2

  • SHA512

    2f6b9a15f62eb1a46696e9e40eb16c3cfd533fcf67a021a54f157870cf9a07f663425542c0ce02bb55f7300bfe8e19837fc88e2deb234cd481e7a137a6156a52

  • SSDEEP

    12288:wvb6/LIH44/ypi+QmWOdHsxls0/CN+lzvqNpQ0lacuAK0wYWWoF5uYwKAT5NL:wGL47q0OBsTCpM5cuAnq7O6A

Score
9/10
evasion

Malware Config

Targets

    • Target

      aa9f56796c2e491f1f124828b0a576b3

    • Size

      710KB

    • MD5

      aa9f56796c2e491f1f124828b0a576b3

    • SHA1

      a2defea410fdbd4848f69ab7255e343c711ef41d

    • SHA256

      e05882b87499e78a2e13f252aef192960bf8ffb54ea2328f525069376b8604f2

    • SHA512

      2f6b9a15f62eb1a46696e9e40eb16c3cfd533fcf67a021a54f157870cf9a07f663425542c0ce02bb55f7300bfe8e19837fc88e2deb234cd481e7a137a6156a52

    • SSDEEP

      12288:wvb6/LIH44/ypi+QmWOdHsxls0/CN+lzvqNpQ0lacuAK0wYWWoF5uYwKAT5NL:wGL47q0OBsTCpM5cuAnq7O6A

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks