Extracted

• • Target
    cL6DF.exe
  • Size 3.2MB
  • SHA256 02a7f2dd56fe066aacf5d3af9bfdcf6fe530c08fec9b263d91b05f4d782a2dc3
  • MD5 fcb48c1f6beace48c7273ad5d5d96c0f
  • SHA1 1138bfffcbe25e30db2a1bd92f5c3e7d4c5b6303
  • SHA512 2b4b48563807122856f955a37be2c4189b5975666637dae227980d743964d5134df02d7585161ac7ddfad103d19b2f075bd1baab194174f85f6584ea0a9e12b2
  • SSDEEP 49152:yhVE7yRCmUxKfRV6CAVqe1gHjBy/ymEK/16wccHtgshpCVjiV:yhVDdV0bHtRjCVjY
  • TLSH
    T1A7F58E2BA3E901ACC0B3C07D89475507EBB2344653A1EEDB56A085665FB7BE01F7A730
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  execution

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  behavioral1behavioral2