General

  • Target

    6fe96e99144e782c95d806ae7a60a0748c52f76710b05c950007a886e93beef2

  • Size

    935KB

  • Sample

    221125-n6g7nafb58

  • MD5

    45772aec794aa031fcc6d4e7c128652d

  • SHA1

    c8b7a4af16857f71b1ed69bed56cf85ab7abec7b

  • SHA256

    6fe96e99144e782c95d806ae7a60a0748c52f76710b05c950007a886e93beef2

  • SHA512

    e627cd9e11a6500eca6c2595d7d7217009388b1078db51675a987cdb054a5985c1eec1a04240599653bdff0c855c35e237f682c7e052ed8b0ea26990d6954c7b

  • SSDEEP

    12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:JyHv5Z+Wzv7AiBll0OBWi6si9G

Score
8/10
upx

Malware Config

Targets

    • Target

      6fe96e99144e782c95d806ae7a60a0748c52f76710b05c950007a886e93beef2

    • Size

      935KB

    • MD5

      45772aec794aa031fcc6d4e7c128652d

    • SHA1

      c8b7a4af16857f71b1ed69bed56cf85ab7abec7b

    • SHA256

      6fe96e99144e782c95d806ae7a60a0748c52f76710b05c950007a886e93beef2

    • SHA512

      e627cd9e11a6500eca6c2595d7d7217009388b1078db51675a987cdb054a5985c1eec1a04240599653bdff0c855c35e237f682c7e052ed8b0ea26990d6954c7b

    • SSDEEP

      12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:JyHv5Z+Wzv7AiBll0OBWi6si9G

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks