Overview

overview

10

Static

static

10

fafcb54558...42.exe

windows7-x64

9

fafcb54558...42.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fafcb5455848db9ad86cd87a0331fd1c67d665f1fdd58130dbb6dd3eeb6d2d42.exe

  • Size

    8.3MB

  • Sample

    241123-nsgc7stqft

  • MD5

    f08a61c3dbf03997cea30e001c6fbc4c

  • SHA1

    f8dfc7ca768ab93109238a94bff940fe5ee165b4

  • SHA256

    fafcb5455848db9ad86cd87a0331fd1c67d665f1fdd58130dbb6dd3eeb6d2d42

  • SHA512

    bc31fbca45e9e0bc58f47a6e9370f4ed66718d92c9282ce1f71f04bd7377d48bd3a12179fcaf58a3fbeb07132a53113c40476613fd09efc6cef13d1a98c1850c

  • SSDEEP

    196608:02IGbIFIvCgcO9R3HQ7343j8TQ3e50jZ7WIwd58zOoGbjP:02nhqOTg7o3uQO+jUIwj8zOoEjP

Score
10/10
neshtadiscoveryevasion

Malware Config

Targets

    • Target

      fafcb5455848db9ad86cd87a0331fd1c67d665f1fdd58130dbb6dd3eeb6d2d42.exe

    • Size

      8.3MB

    • MD5

      f08a61c3dbf03997cea30e001c6fbc4c

    • SHA1

      f8dfc7ca768ab93109238a94bff940fe5ee165b4

    • SHA256

      fafcb5455848db9ad86cd87a0331fd1c67d665f1fdd58130dbb6dd3eeb6d2d42

    • SHA512

      bc31fbca45e9e0bc58f47a6e9370f4ed66718d92c9282ce1f71f04bd7377d48bd3a12179fcaf58a3fbeb07132a53113c40476613fd09efc6cef13d1a98c1850c

    • SSDEEP

      196608:02IGbIFIvCgcO9R3HQ7343j8TQ3e50jZ7WIwd58zOoGbjP:02nhqOTg7o3uQO+jUIwj8zOoEjP

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks