General

  • Target

    77ecbb6e9ecb45e7775fa0473f0459fc8b049e0d107f5dc7f69023a8eac9181f

  • Size

    935KB

  • Sample

    221125-nsgnzahc51

  • MD5

    9c9a43abb9b943a4057ba752756ac3d6

  • SHA1

    c3042b803fb6c06ef4bf445c5b111e8c3a8b69c2

  • SHA256

    77ecbb6e9ecb45e7775fa0473f0459fc8b049e0d107f5dc7f69023a8eac9181f

  • SHA512

    87032a28461f55be1c1a4f483cfd49357a12f1ebba9253cc6075a9c50b9b4ab83d31e008657a4d86af43e5eaa4cd9ff4532ddefe2fbd4dc675093d83a1816273

  • SSDEEP

    12288:o5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4y:oyHv5Z+Wzv7AiBll0OBWi6si9G/

Score
8/10
upx

Malware Config

Targets

    • Target

      77ecbb6e9ecb45e7775fa0473f0459fc8b049e0d107f5dc7f69023a8eac9181f

    • Size

      935KB

    • MD5

      9c9a43abb9b943a4057ba752756ac3d6

    • SHA1

      c3042b803fb6c06ef4bf445c5b111e8c3a8b69c2

    • SHA256

      77ecbb6e9ecb45e7775fa0473f0459fc8b049e0d107f5dc7f69023a8eac9181f

    • SHA512

      87032a28461f55be1c1a4f483cfd49357a12f1ebba9253cc6075a9c50b9b4ab83d31e008657a4d86af43e5eaa4cd9ff4532ddefe2fbd4dc675093d83a1816273

    • SSDEEP

      12288:o5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4y:oyHv5Z+Wzv7AiBll0OBWi6si9G/

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks