General

  • Target

    e6ed8deee2edb08d8220ddb2c95a14a5a29dce230ffe8efb9443f1c53dcf7096

  • Size

    931KB

  • Sample

    221125-hnfcfscg4x

  • MD5

    29d97523787629580e940566fa2a1681

  • SHA1

    52e496a2bf8707cd3a027d1a956ddbc479bc310a

  • SHA256

    e6ed8deee2edb08d8220ddb2c95a14a5a29dce230ffe8efb9443f1c53dcf7096

  • SHA512

    8750cacd1e3e6c1881becc4f6beef8264c887df90f3ac878428f178137ee91312c23b270cf08fca3fda3bfdfa3a582a7129122e7ccaf8533972a522935b58eea

  • SSDEEP

    24576:y6IMwPvmB/wWq+5DUTt7FGSwmpu8nL6YK:y6j19rut7FoU56

Score
8/10
upx

Malware Config

Targets

    • Target

      e6ed8deee2edb08d8220ddb2c95a14a5a29dce230ffe8efb9443f1c53dcf7096

    • Size

      931KB

    • MD5

      29d97523787629580e940566fa2a1681

    • SHA1

      52e496a2bf8707cd3a027d1a956ddbc479bc310a

    • SHA256

      e6ed8deee2edb08d8220ddb2c95a14a5a29dce230ffe8efb9443f1c53dcf7096

    • SHA512

      8750cacd1e3e6c1881becc4f6beef8264c887df90f3ac878428f178137ee91312c23b270cf08fca3fda3bfdfa3a582a7129122e7ccaf8533972a522935b58eea

    • SSDEEP

      24576:y6IMwPvmB/wWq+5DUTt7FGSwmpu8nL6YK:y6j19rut7FoU56

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Peripheral Device Discovery

1
T1120

Tasks