Overview

overview

9

Static

static

3

05453e25bb...b1.exe

windows7-x64

9

05453e25bb...b1.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    05453e25bb1bd5808aa0ef4ab2da330858621dd19428c7a5dd42b240265a5eb1

  • Size

    7.7MB

  • Sample

    240913-enakestfmh

  • MD5

    0fb792dd455c00243ddbc0687cd01870

  • SHA1

    4311fc94e62e03cea3714368e688f6e5189152b1

  • SHA256

    05453e25bb1bd5808aa0ef4ab2da330858621dd19428c7a5dd42b240265a5eb1

  • SHA512

    ff8cdd1a56cdd90a090dcff6909388fa787b4562601480c7ba07daf1b9b5df323df4b0c656e95e0e2bc5a6b1c0da8224efcae46329bb016c75ebabfa54f89672

  • SSDEEP

    196608:ufCsumTHg89dGq+cjvJFD36Iydc1IAxHbG6rjY6:ufHTHgedGq+cdR6IzeANC6PY6

Score
9/10
discoveryevasionupx

Malware Config

Targets

    • Target

      05453e25bb1bd5808aa0ef4ab2da330858621dd19428c7a5dd42b240265a5eb1

    • Size

      7.7MB

    • MD5

      0fb792dd455c00243ddbc0687cd01870

    • SHA1

      4311fc94e62e03cea3714368e688f6e5189152b1

    • SHA256

      05453e25bb1bd5808aa0ef4ab2da330858621dd19428c7a5dd42b240265a5eb1

    • SHA512

      ff8cdd1a56cdd90a090dcff6909388fa787b4562601480c7ba07daf1b9b5df323df4b0c656e95e0e2bc5a6b1c0da8224efcae46329bb016c75ebabfa54f89672

    • SSDEEP

      196608:ufCsumTHg89dGq+cjvJFD36Iydc1IAxHbG6rjY6:ufHTHgedGq+cdR6IzeANC6PY6

    Score
    9/10
    discoveryevasionupx

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks