General

  • Target

    9cd16ce40588fe1f0c360b6e872c3e084513184a94bf477529f11081d7a405bf

  • Size

    935KB

  • Sample

    221125-l4k5esda7w

  • MD5

    3297e56c2212b4cdc237809120a12682

  • SHA1

    6aee1af0c26c4b5a48d8abd1616c6bd343df1f40

  • SHA256

    9cd16ce40588fe1f0c360b6e872c3e084513184a94bf477529f11081d7a405bf

  • SHA512

    336fd36a4e44f77d777df99aa62195b61b0724bd8159cd8eab20d360c9a7ec7e32c769f2ff53974237a29c6c055a50faf8adc5e7b5355b6d3cc6d3f339dab1f2

  • SSDEEP

    12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4o:JyHv5Z+Wzv7AiBll0OBWi6si9Gp

Score
8/10
upx

Malware Config

Targets

    • Target

      9cd16ce40588fe1f0c360b6e872c3e084513184a94bf477529f11081d7a405bf

    • Size

      935KB

    • MD5

      3297e56c2212b4cdc237809120a12682

    • SHA1

      6aee1af0c26c4b5a48d8abd1616c6bd343df1f40

    • SHA256

      9cd16ce40588fe1f0c360b6e872c3e084513184a94bf477529f11081d7a405bf

    • SHA512

      336fd36a4e44f77d777df99aa62195b61b0724bd8159cd8eab20d360c9a7ec7e32c769f2ff53974237a29c6c055a50faf8adc5e7b5355b6d3cc6d3f339dab1f2

    • SSDEEP

      12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4o:JyHv5Z+Wzv7AiBll0OBWi6si9Gp

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks