MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bd7b2d30b633986f5eabfd4e1bb561e7cf7e79ee7be5db03bee270c79298d252. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments 1

SHA256 hash: bd7b2d30b633986f5eabfd4e1bb561e7cf7e79ee7be5db03bee270c79298d252
SHA3-384 hash: 9c365fe4b5070e83868f4ab09fb1d20d188ce9dcb90487de2db2a49632658c51a5bd7ccaaef37c64a1c959d01373ded3
SHA1 hash: aa2b0a80c2fab11f661c96a6dce5aad18973a995
MD5 hash: 9abf12739a67e7ae23b715d85cede12a
humanhash: oven-jupiter-hydrogen-idaho
File name:SuperDisplay_Installer_v1.1.10.exe
Download: download sample
File size:29'446'384 bytes
First seen:2021-04-29 07:05:58 UTC
Last seen:2021-04-29 10:25:45 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash 2565cbd2a560c6b3554de2985322d883 (1 x Arechclient2)
ssdeep 786432:Q4hb4hZhBzkqU9odEQhTMiupttD7yBG/PcXU9g5h:zO/h3h+xjpttD7y0/0XUm5h
Threatray 5 similar samples on MalwareBazaar
TLSH A6571231778AC53BD57205B06A2CD7AF1469BF640F7044DBA3C86D6E99B48C38632E27
Reporter ankit_anubhav

Intelligence


File Origin
# of uploads :
3
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Clean
Maliciousness:

Behaviour
Creating a window
Creating a file in the %temp% subdirectories
Sending a UDP request
Creating a file
Deleting a recently created file
Result
Verdict:
UNKNOWN
Result
Threat name:
Unknown
Detection:
clean
Classification:
n/a
Score:
8 / 100
Behaviour
Behavior Graph:
n/a
Gathering data
Result
Malware family:
n/a
Score:
  7/10
Tags:
n/a
Behaviour
Modifies system certificate store
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Suspicious use of WriteProcessMemory
Enumerates connected drives
Loads dropped DLL
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments



Avatar
a̵c̵c̸i̵d̷e̵n̷t̴a̷l̴r̵e̷b̸e̴l̸ commented on 2021-04-29 08:42:53 UTC

============================================================
MBC behaviors list (github.com/accidentalrebel/mbcscan):
============================================================
0) [B0001.036] Anti-Behavioral Analysis::Process Environment Block NtGlobalFlag
1) [B0001.025] Anti-Behavioral Analysis::Software Breakpoints
2) [B0009.012] Anti-Behavioral Analysis::Human User Check
3) [B0009] Anti-Behavioral Analysis::Virtual Machine Detection
4) [B0012.001] Anti-Static Analysis::Argument Obfuscation
5) [F0002.002] Collection::Polling
6) [B0030.002] Command and Control::Receive Data
7) [C0002.009] Communication Micro-objective::Connect to Server::HTTP Communication
8) [C0002.012] Communication Micro-objective::Create Request::HTTP Communication
9) [C0002.017] Communication Micro-objective::Get Response::HTTP Communication
10) [C0002.014] Communication Micro-objective::Read Header::HTTP Communication
11) [C0003.002] Communication Micro-objective::Connect Pipe::Interprocess Communication
12) [C0003.001] Communication Micro-objective::Create Pipe::Interprocess Communication
13) [C0003.003] Communication Micro-objective::Read Pipe::Interprocess Communication
14) [C0019] Data Micro-objective::Check String
15) [C0026.001] Data Micro-objective::Base64::Encode Data
16) [C0026.002] Data Micro-objective::XOR::Encode Data
17) [C0030.005] Data Micro-objective::FNV::Non-Cryptographic Hash
20) [B0023] Execution::Install Additional Program
21) [C0045] File System Micro-objective::Copy File
22) [C0046] File System Micro-objective::Create Directory
23) [C0048] File System Micro-objective::Delete Directory
24) [C0047] File System Micro-objective::Delete File
25) [C0049] File System Micro-objective::Get File Attributes
26) [C0051] File System Micro-objective::Read File
27) [C0050] File System Micro-objective::Set File Attributes
28) [C0052] File System Micro-objective::Writes File
29) [C0007] Memory Micro-objective::Allocate Memory
30) [C0036.004] Operating System Micro-objective::Create Registry Key::Registry
31) [C0036.002] Operating System Micro-objective::Delete Registry Key::Registry
32) [C0036.007] Operating System Micro-objective::Delete Registry Value::Registry
33) [C0036.003] Operating System Micro-objective::Open Registry Key::Registry
34) [C0036.005] Operating System Micro-objective::Query Registry Key::Registry
35) [C0036.006] Operating System Micro-objective::Query Registry Value::Registry
36) [C0036.001] Operating System Micro-objective::Set Registry Key::Registry
37) [C0040] Process Micro-objective::Allocate Thread Local Storage
38) [C0017] Process Micro-objective::Create Process
39) [C0038] Process Micro-objective::Create Thread
40) [C0041] Process Micro-objective::Set Thread Local Storage Value
41) [C0018] Process Micro-objective::Terminate Process
42) [C0039] Process Micro-objective::Terminate Thread