General

  • Target

    65d6e583e6a30364b7c89dc93a9bbf5c1c08a5fca5f4f11e7d89a60de4ed0b7c

  • Size

    935KB

  • Sample

    221125-pmkzwagc95

  • MD5

    402298c926b49546c2aed4619220aa66

  • SHA1

    411063cb88cf42579cdf70be62165f4ca5620a67

  • SHA256

    65d6e583e6a30364b7c89dc93a9bbf5c1c08a5fca5f4f11e7d89a60de4ed0b7c

  • SHA512

    c9a3bbc7c2668575531f82f1ebc53bcaf927b1fa83cb13b7628a8ce2116a1b6cc05e288ffde8fd8eb6756df9a0f8f54bf9d463ab04c26d06d99b6ea9e545744b

  • SSDEEP

    12288:o5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4u:oyHv5Z+Wzv7AiBll0OBWi6si9GD

Score
8/10
upx

Malware Config

Targets

    • Target

      65d6e583e6a30364b7c89dc93a9bbf5c1c08a5fca5f4f11e7d89a60de4ed0b7c

    • Size

      935KB

    • MD5

      402298c926b49546c2aed4619220aa66

    • SHA1

      411063cb88cf42579cdf70be62165f4ca5620a67

    • SHA256

      65d6e583e6a30364b7c89dc93a9bbf5c1c08a5fca5f4f11e7d89a60de4ed0b7c

    • SHA512

      c9a3bbc7c2668575531f82f1ebc53bcaf927b1fa83cb13b7628a8ce2116a1b6cc05e288ffde8fd8eb6756df9a0f8f54bf9d463ab04c26d06d99b6ea9e545744b

    • SSDEEP

      12288:o5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4u:oyHv5Z+Wzv7AiBll0OBWi6si9GD

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks