General

  • Target

    61fc582dd13261ca0593f4b436710e9f5cdae94c5d9c0bc84d3be6708b894d02

  • Size

    935KB

  • Sample

    221125-psd4hsgg54

  • MD5

    7e5ab7a8e168920a09069db8a6e3f990

  • SHA1

    a140dae2c472f85b681cb1bdfe99ae746cf8a4ef

  • SHA256

    61fc582dd13261ca0593f4b436710e9f5cdae94c5d9c0bc84d3be6708b894d02

  • SHA512

    921b9f21a0d158b1efc33b0c7d3c9046f84cdfcf7fe1d5efe9f88103e67566c4d73a224a37c76aa32768480d5c7791281d9fe45350f1a4516c6bce4666916cb3

  • SSDEEP

    12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:JyHv5Z+Wzv7AiBll0OBWi6si9G

Score
8/10
upx

Malware Config

Targets

    • Target

      61fc582dd13261ca0593f4b436710e9f5cdae94c5d9c0bc84d3be6708b894d02

    • Size

      935KB

    • MD5

      7e5ab7a8e168920a09069db8a6e3f990

    • SHA1

      a140dae2c472f85b681cb1bdfe99ae746cf8a4ef

    • SHA256

      61fc582dd13261ca0593f4b436710e9f5cdae94c5d9c0bc84d3be6708b894d02

    • SHA512

      921b9f21a0d158b1efc33b0c7d3c9046f84cdfcf7fe1d5efe9f88103e67566c4d73a224a37c76aa32768480d5c7791281d9fe45350f1a4516c6bce4666916cb3

    • SSDEEP

      12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:JyHv5Z+Wzv7AiBll0OBWi6si9G

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks