Overview

overview

9

Static

static

3

eaa41c656c...6b.exe

windows7-x64

9

eaa41c656c...6b.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eaa41c656c107cadd3ecd84eb6f9338185db27b7ed156e8244446fa46b3b936b

  • Size

    1.8MB

  • Sample

    241121-jj9wyavjar

  • MD5

    c6774985fc109440ce01c0bdf1978a96

  • SHA1

    6c3c8e16544c299ee31175d7796679da0bf33736

  • SHA256

    eaa41c656c107cadd3ecd84eb6f9338185db27b7ed156e8244446fa46b3b936b

  • SHA512

    9b3bb6f1de8a84cf3163faa52444c993c2ad46981b26e95e00a7d2e7eb3d676c8d8826419b6f1273fdaaa9db7daa0f520186599230b0dff949ad4385a3b5d316

  • SSDEEP

    24576:glRGi9tDVvJVftU4j6YF6co+oomzFgoZ8FSCiZlQUiB+XA1sZDz7yflQ1MLeyIuw:+PJrNF//o35PZ86yzXeOtMMmLxM

Score
9/10
discoveryevasion

Malware Config

Targets

    • Target

      eaa41c656c107cadd3ecd84eb6f9338185db27b7ed156e8244446fa46b3b936b

    • Size

      1.8MB

    • MD5

      c6774985fc109440ce01c0bdf1978a96

    • SHA1

      6c3c8e16544c299ee31175d7796679da0bf33736

    • SHA256

      eaa41c656c107cadd3ecd84eb6f9338185db27b7ed156e8244446fa46b3b936b

    • SHA512

      9b3bb6f1de8a84cf3163faa52444c993c2ad46981b26e95e00a7d2e7eb3d676c8d8826419b6f1273fdaaa9db7daa0f520186599230b0dff949ad4385a3b5d316

    • SSDEEP

      24576:glRGi9tDVvJVftU4j6YF6co+oomzFgoZ8FSCiZlQUiB+XA1sZDz7yflQ1MLeyIuw:+PJrNF//o35PZ86yzXeOtMMmLxM

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks