General

  • Target

    61cf31134b0e44aeef33d82e2200472655656d295218c635b790f02de2683b4f

  • Size

    931KB

  • Sample

    221125-pskw3abh9s

  • MD5

    879f40398162058a264f9ef39a036f9b

  • SHA1

    1b44ba8c44f84a1c123679712232d758cab0d55f

  • SHA256

    61cf31134b0e44aeef33d82e2200472655656d295218c635b790f02de2683b4f

  • SHA512

    3df9073a6676d7013cf7dcf86fb2ef1bbd4274bb15b618de644e7f0f297583db88b2f506de84aab1cf4b904aa6c8864d60f87dad954827f27ca879473b86cfd3

  • SSDEEP

    24576:i6IMwPvmB/wWq+5DUTt7FGSwmpu8nL6YKD:i6j19rut7FoU565

Score
8/10
upx

Malware Config

Targets

    • Target

      61cf31134b0e44aeef33d82e2200472655656d295218c635b790f02de2683b4f

    • Size

      931KB

    • MD5

      879f40398162058a264f9ef39a036f9b

    • SHA1

      1b44ba8c44f84a1c123679712232d758cab0d55f

    • SHA256

      61cf31134b0e44aeef33d82e2200472655656d295218c635b790f02de2683b4f

    • SHA512

      3df9073a6676d7013cf7dcf86fb2ef1bbd4274bb15b618de644e7f0f297583db88b2f506de84aab1cf4b904aa6c8864d60f87dad954827f27ca879473b86cfd3

    • SSDEEP

      24576:i6IMwPvmB/wWq+5DUTt7FGSwmpu8nL6YKD:i6j19rut7FoU565

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Peripheral Device Discovery

1
T1120

Tasks