General

  • Target

    612c5c1d754066dbefee823d9fc5389d9912fb9827f6dc63f66d156d05aa8cda

  • Size

    935KB

  • Sample

    221125-ptcxvagg96

  • MD5

    408467fd2e9dda741d37d176742dbb58

  • SHA1

    a076d2ab5107befd3ece2a5eeb26ebe2b14f125a

  • SHA256

    612c5c1d754066dbefee823d9fc5389d9912fb9827f6dc63f66d156d05aa8cda

  • SHA512

    1b9d3bbc69c0be4c84232d86f6a4b940b76bad15fca6ba6a3ec377039851d3192dabf7a3624e38fb0f63c60ab4f6d2c239c6b0037a7771900440ae5e338a15f8

  • SSDEEP

    12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4N:pyHv5Z+Wzv7AiBll0OBWi6si9Gw

Score
8/10
upx

Malware Config

Targets

    • Target

      612c5c1d754066dbefee823d9fc5389d9912fb9827f6dc63f66d156d05aa8cda

    • Size

      935KB

    • MD5

      408467fd2e9dda741d37d176742dbb58

    • SHA1

      a076d2ab5107befd3ece2a5eeb26ebe2b14f125a

    • SHA256

      612c5c1d754066dbefee823d9fc5389d9912fb9827f6dc63f66d156d05aa8cda

    • SHA512

      1b9d3bbc69c0be4c84232d86f6a4b940b76bad15fca6ba6a3ec377039851d3192dabf7a3624e38fb0f63c60ab4f6d2c239c6b0037a7771900440ae5e338a15f8

    • SSDEEP

      12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4N:pyHv5Z+Wzv7AiBll0OBWi6si9Gw

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks