General

  • Target

    6e9de42bc2d3643b7a8daeef4fd2f2205238ad95e90951e44a3cb192e5534fce

  • Size

    935KB

  • Sample

    221125-n8jhhafc84

  • MD5

    f51f28140de8041a1a3f0f84268c40a4

  • SHA1

    006feccb9c96d8bb946f54eaaba184b05737ce45

  • SHA256

    6e9de42bc2d3643b7a8daeef4fd2f2205238ad95e90951e44a3cb192e5534fce

  • SHA512

    8049ceffc2d56181e123d37f20c43cf56c108be68c13031641421005b0f63f15fd2171d822ba5ee727490f9c5e87049b39a5c57e9aaa7008f008796d44ed338c

  • SSDEEP

    12288:o5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4b:oyHv5Z+Wzv7AiBll0OBWi6si9Ge

Score
8/10
upx

Malware Config

Targets

    • Target

      6e9de42bc2d3643b7a8daeef4fd2f2205238ad95e90951e44a3cb192e5534fce

    • Size

      935KB

    • MD5

      f51f28140de8041a1a3f0f84268c40a4

    • SHA1

      006feccb9c96d8bb946f54eaaba184b05737ce45

    • SHA256

      6e9de42bc2d3643b7a8daeef4fd2f2205238ad95e90951e44a3cb192e5534fce

    • SHA512

      8049ceffc2d56181e123d37f20c43cf56c108be68c13031641421005b0f63f15fd2171d822ba5ee727490f9c5e87049b39a5c57e9aaa7008f008796d44ed338c

    • SSDEEP

      12288:o5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4b:oyHv5Z+Wzv7AiBll0OBWi6si9Ge

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks