General

  • Target

    ea347a3af5fd61ef74512d6565887313e0e099b49381f058141f3324cf21263f

  • Size

    935KB

  • Sample

    221125-hhyxlsgh89

  • MD5

    d3bfa360236659d60d469ff33b9d6d14

  • SHA1

    02fd155177b1d9dce606d8a892b9b6f63f27f5b3

  • SHA256

    ea347a3af5fd61ef74512d6565887313e0e099b49381f058141f3324cf21263f

  • SHA512

    522a3a55fe9bebcb5c9ee0d53ef63107042e87ae91eab3a2b3f33034773847a2dfac15817e80ad4c39f6a9c186e48f406aa3acfd9779e8d4bb2551e2b5d79e2a

  • SSDEEP

    12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:JyHv5Z+Wzv7AiBll0OBWi6si9G

Score
8/10
upx

Malware Config

Targets

    • Target

      ea347a3af5fd61ef74512d6565887313e0e099b49381f058141f3324cf21263f

    • Size

      935KB

    • MD5

      d3bfa360236659d60d469ff33b9d6d14

    • SHA1

      02fd155177b1d9dce606d8a892b9b6f63f27f5b3

    • SHA256

      ea347a3af5fd61ef74512d6565887313e0e099b49381f058141f3324cf21263f

    • SHA512

      522a3a55fe9bebcb5c9ee0d53ef63107042e87ae91eab3a2b3f33034773847a2dfac15817e80ad4c39f6a9c186e48f406aa3acfd9779e8d4bb2551e2b5d79e2a

    • SSDEEP

      12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:JyHv5Z+Wzv7AiBll0OBWi6si9G

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks