General

  • Target

    645f455e7eace27730fb6ae85761c3b0237d7167fe98b8b665e5d4d06ccd5b07

  • Size

    935KB

  • Sample

    221125-ppaxpabf6z

  • MD5

    98a6eb72acb95bc855d2c02956577f69

  • SHA1

    eb4db0fd834d3cdb529acbd0595601c3282103c6

  • SHA256

    645f455e7eace27730fb6ae85761c3b0237d7167fe98b8b665e5d4d06ccd5b07

  • SHA512

    a0d0f6390b3100d67aa4ca9aab447410ee003205d50cdf18b0b37d57225b2dafad39b623c7bafb52d7106291eeb179f134b00a3d26dc0f8a012ee9713df77b2e

  • SSDEEP

    12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:JyHv5Z+Wzv7AiBll0OBWi6si9G

Score
8/10
upx

Malware Config

Targets

    • Target

      645f455e7eace27730fb6ae85761c3b0237d7167fe98b8b665e5d4d06ccd5b07

    • Size

      935KB

    • MD5

      98a6eb72acb95bc855d2c02956577f69

    • SHA1

      eb4db0fd834d3cdb529acbd0595601c3282103c6

    • SHA256

      645f455e7eace27730fb6ae85761c3b0237d7167fe98b8b665e5d4d06ccd5b07

    • SHA512

      a0d0f6390b3100d67aa4ca9aab447410ee003205d50cdf18b0b37d57225b2dafad39b623c7bafb52d7106291eeb179f134b00a3d26dc0f8a012ee9713df77b2e

    • SSDEEP

      12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:JyHv5Z+Wzv7AiBll0OBWi6si9G

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks