Overview

overview

10

Static

static

10

04281fafba...2a.exe

windows7-x64

9

04281fafba...2a.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    04281fafba173f71d728458add16d98b5db5ad5bacc2ecdc698ba6e73275ae2a

  • Size

    1.0MB

  • Sample

    240309-y5v28shd33

  • MD5

    8118f37ecd3279bae7cd406c866b2fcd

  • SHA1

    7c9b5fbbfb2ae597a429e684f5abed84df0215cb

  • SHA256

    04281fafba173f71d728458add16d98b5db5ad5bacc2ecdc698ba6e73275ae2a

  • SHA512

    c8baa4a3b70a4c78410d065f823eef1d7f7333de514fd5b10bbe9bbafac4432862b30fc53e36eda716143fee482c535455d494d2f2632b7e39ab5e835138bf9b

  • SSDEEP

    24576:pQP1WIt/PcyQzktVF72ofLFCQUeXkS96WJW0:K9WiHcWFdFCBk9vW

Score
10/10
discovery

Malware Config

Targets

    • Target

      04281fafba173f71d728458add16d98b5db5ad5bacc2ecdc698ba6e73275ae2a

    • Size

      1.0MB

    • MD5

      8118f37ecd3279bae7cd406c866b2fcd

    • SHA1

      7c9b5fbbfb2ae597a429e684f5abed84df0215cb

    • SHA256

      04281fafba173f71d728458add16d98b5db5ad5bacc2ecdc698ba6e73275ae2a

    • SHA512

      c8baa4a3b70a4c78410d065f823eef1d7f7333de514fd5b10bbe9bbafac4432862b30fc53e36eda716143fee482c535455d494d2f2632b7e39ab5e835138bf9b

    • SSDEEP

      24576:pQP1WIt/PcyQzktVF72ofLFCQUeXkS96WJW0:K9WiHcWFdFCBk9vW

    Score
    9/10
    discovery

    • Detects executables built or packed with MPress PE compressor

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks