General

  • Target

    e91e7262e7a52bfa8d936e17f99fa88d67bf2c0dcb0554ae72cb79f15f54f224

  • Size

    935KB

  • Sample

    221125-hkg2wace41

  • MD5

    cc07d830434765a8327a9dd93212e252

  • SHA1

    64f38a9f3bdf6b60f4769af691c024eac45159cf

  • SHA256

    e91e7262e7a52bfa8d936e17f99fa88d67bf2c0dcb0554ae72cb79f15f54f224

  • SHA512

    1e1ad6de0a3a0462b4a9626d41098aa711f8c17f5e234ea51b9e5023d28362225985dc6a0c963aa2faf9eaa083398bc975bb7c89266986bd12dae3a6a571239c

  • SSDEEP

    12288:o5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x41:oyHv5Z+Wzv7AiBll0OBWi6si9GY

Score
8/10
upx

Malware Config

Targets

    • Target

      e91e7262e7a52bfa8d936e17f99fa88d67bf2c0dcb0554ae72cb79f15f54f224

    • Size

      935KB

    • MD5

      cc07d830434765a8327a9dd93212e252

    • SHA1

      64f38a9f3bdf6b60f4769af691c024eac45159cf

    • SHA256

      e91e7262e7a52bfa8d936e17f99fa88d67bf2c0dcb0554ae72cb79f15f54f224

    • SHA512

      1e1ad6de0a3a0462b4a9626d41098aa711f8c17f5e234ea51b9e5023d28362225985dc6a0c963aa2faf9eaa083398bc975bb7c89266986bd12dae3a6a571239c

    • SSDEEP

      12288:o5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x41:oyHv5Z+Wzv7AiBll0OBWi6si9GY

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks