Overview

overview

9

Static

static

3

7129067bec...e2.exe

windows7-x64

9

7129067bec...e2.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7129067bec7424dbad5e15e18f904bc940c921239ed75eb1a23eaaa525b4e9e2

  • Size

    2.2MB

  • Sample

    240522-z7k6gshb6t

  • MD5

    17af1144e1ef08d93dcafe5075b3ade8

  • SHA1

    fe10d1aafa391b8394eef09954a72e39d7e36d60

  • SHA256

    7129067bec7424dbad5e15e18f904bc940c921239ed75eb1a23eaaa525b4e9e2

  • SHA512

    001f1edcb44d4574c8fd87fc72df8a60185a58a356b4c853158c9c4e0b20b0440d6e6b989bcca822b348d0c4fde6222d3c1d8be3b792b354054c0b0d70bf5159

  • SSDEEP

    49152:hu4CmV1PmeS0rBMGKCevL0XNQNElZ+dQaIXHQlVZ0qnk:hu8/Pm6FMfCew9WEz+dQ1k3k

Score
9/10
evasion

Malware Config

Targets

    • Target

      7129067bec7424dbad5e15e18f904bc940c921239ed75eb1a23eaaa525b4e9e2

    • Size

      2.2MB

    • MD5

      17af1144e1ef08d93dcafe5075b3ade8

    • SHA1

      fe10d1aafa391b8394eef09954a72e39d7e36d60

    • SHA256

      7129067bec7424dbad5e15e18f904bc940c921239ed75eb1a23eaaa525b4e9e2

    • SHA512

      001f1edcb44d4574c8fd87fc72df8a60185a58a356b4c853158c9c4e0b20b0440d6e6b989bcca822b348d0c4fde6222d3c1d8be3b792b354054c0b0d70bf5159

    • SSDEEP

      49152:hu4CmV1PmeS0rBMGKCevL0XNQNElZ+dQaIXHQlVZ0qnk:hu8/Pm6FMfCew9WEz+dQ1k3k

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks