General

  • Target

    61a18c32752587ddfe5b5eda2e7d131f7b891e48e2f7718b0e0aec73e75bea2f

  • Size

    935KB

  • Sample

    221125-psr1dagg68

  • MD5

    96d0f824b05c33a2b6a183d2b8693316

  • SHA1

    b4b250aa39a2287b5e40d92b7f23f62da523fb8c

  • SHA256

    61a18c32752587ddfe5b5eda2e7d131f7b891e48e2f7718b0e0aec73e75bea2f

  • SHA512

    f12bd26c9197eee569d647cefa5af3c1c16b24eb419c0a3bbbe25451256420cc0ad8a8a9d40a4bddc24c61ce1e83e7059a92ec69e73edd1b5647a7d6f055da89

  • SSDEEP

    12288:55Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4f:5yHv5Z+Wzv7AiBll0OBWi6si9GG

Score
8/10
upx

Malware Config

Targets

    • Target

      61a18c32752587ddfe5b5eda2e7d131f7b891e48e2f7718b0e0aec73e75bea2f

    • Size

      935KB

    • MD5

      96d0f824b05c33a2b6a183d2b8693316

    • SHA1

      b4b250aa39a2287b5e40d92b7f23f62da523fb8c

    • SHA256

      61a18c32752587ddfe5b5eda2e7d131f7b891e48e2f7718b0e0aec73e75bea2f

    • SHA512

      f12bd26c9197eee569d647cefa5af3c1c16b24eb419c0a3bbbe25451256420cc0ad8a8a9d40a4bddc24c61ce1e83e7059a92ec69e73edd1b5647a7d6f055da89

    • SSDEEP

      12288:55Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4f:5yHv5Z+Wzv7AiBll0OBWi6si9GG

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks