General

  • Target

    6094a859e12b68af0a4484d1c6b43116f4b0acfee3ac3a3f73d87a01b3dd3b6e

  • Size

    935KB

  • Sample

    221125-pt27qsgh52

  • MD5

    5440cf0f3ca272a11ef9274b596a4c6e

  • SHA1

    892731f271ba0f044e3633b55ed2887282dacd42

  • SHA256

    6094a859e12b68af0a4484d1c6b43116f4b0acfee3ac3a3f73d87a01b3dd3b6e

  • SHA512

    7c1f32c3992e5d3ff8e998184ede783aacb19cbf7450c2d3b4d34b0e894b9494ae307c3f3edb5934cb3a4260978faa89e0fcc2c6397e33d8867098ae5b4fc40e

  • SSDEEP

    12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4h:IyHv5Z+Wzv7AiBll0OBWi6si9GI

Score
8/10
upx

Malware Config

Targets

    • Target

      6094a859e12b68af0a4484d1c6b43116f4b0acfee3ac3a3f73d87a01b3dd3b6e

    • Size

      935KB

    • MD5

      5440cf0f3ca272a11ef9274b596a4c6e

    • SHA1

      892731f271ba0f044e3633b55ed2887282dacd42

    • SHA256

      6094a859e12b68af0a4484d1c6b43116f4b0acfee3ac3a3f73d87a01b3dd3b6e

    • SHA512

      7c1f32c3992e5d3ff8e998184ede783aacb19cbf7450c2d3b4d34b0e894b9494ae307c3f3edb5934cb3a4260978faa89e0fcc2c6397e33d8867098ae5b4fc40e

    • SSDEEP

      12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4h:IyHv5Z+Wzv7AiBll0OBWi6si9GI

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks