General

  • Target

    b26fde5e6d9afee67463a3d17b35f5ad0846b1cd7ca2f0b83f1ead870ea73a0b

  • Size

    935KB

  • Sample

    221125-k34ppsag2t

  • MD5

    4af1d3b46fa06e743915f0fe89b1f850

  • SHA1

    b98c7ba91ab55842ae8e969d75b2bdf112069f51

  • SHA256

    b26fde5e6d9afee67463a3d17b35f5ad0846b1cd7ca2f0b83f1ead870ea73a0b

  • SHA512

    6cc802d243a6f96a44cbf8b476028369a9f4406037c6b06ae8bda0760f959893cad1f4975b344e4625c0fd0e392f167eb96038e8e1aa1d5eec297ba8da47062d

  • SSDEEP

    12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4a:pyHv5Z+Wzv7AiBll0OBWi6si9GL

Score
8/10
upx

Malware Config

Targets

    • Target

      b26fde5e6d9afee67463a3d17b35f5ad0846b1cd7ca2f0b83f1ead870ea73a0b

    • Size

      935KB

    • MD5

      4af1d3b46fa06e743915f0fe89b1f850

    • SHA1

      b98c7ba91ab55842ae8e969d75b2bdf112069f51

    • SHA256

      b26fde5e6d9afee67463a3d17b35f5ad0846b1cd7ca2f0b83f1ead870ea73a0b

    • SHA512

      6cc802d243a6f96a44cbf8b476028369a9f4406037c6b06ae8bda0760f959893cad1f4975b344e4625c0fd0e392f167eb96038e8e1aa1d5eec297ba8da47062d

    • SSDEEP

      12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4a:pyHv5Z+Wzv7AiBll0OBWi6si9GL

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks