Overview

overview

7

Static

static

3

aebf1b93c9...72.exe

windows7-x64

7

aebf1b93c9...72.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    aebf1b93c97a87cfc4a96a294ff77ee673cfd29e04f5b6ae07ddb09c13859772

  • Size

    11.9MB

  • Sample

    240620-waqsxstfln

  • MD5

    61f883c72826959af30402bd20dfbd64

  • SHA1

    8d50eda0157356543e691fe74c447659312c1596

  • SHA256

    aebf1b93c97a87cfc4a96a294ff77ee673cfd29e04f5b6ae07ddb09c13859772

  • SHA512

    17272252751807e239cd6e871d9cc9c0266930453aa09cc7324c4d448fa146dab8404192af5790abc366c73df1cdd6f26953d4f8f1f21e6e8cb4cc535b795666

  • SSDEEP

    196608:kotZgs21BRddoQlSOLM8gYQjhztrCQllnNzaR:kotZoBRM0tL9gYQjhz4QlKR

Score
7/10

Malware Config

Targets

    • Target

      aebf1b93c97a87cfc4a96a294ff77ee673cfd29e04f5b6ae07ddb09c13859772

    • Size

      11.9MB

    • MD5

      61f883c72826959af30402bd20dfbd64

    • SHA1

      8d50eda0157356543e691fe74c447659312c1596

    • SHA256

      aebf1b93c97a87cfc4a96a294ff77ee673cfd29e04f5b6ae07ddb09c13859772

    • SHA512

      17272252751807e239cd6e871d9cc9c0266930453aa09cc7324c4d448fa146dab8404192af5790abc366c73df1cdd6f26953d4f8f1f21e6e8cb4cc535b795666

    • SSDEEP

      196608:kotZgs21BRddoQlSOLM8gYQjhztrCQllnNzaR:kotZoBRM0tL9gYQjhz4QlKR

    Score
    7/10

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks