General

  • Target

    5faa54d8b5f46409ccbbd36d455cc3bb978c83049bae3687fd962fe78ac4ad8c

  • Size

    935KB

  • Sample

    221125-pwet8aha36

  • MD5

    cf69bb76aec3df4bb7b2f86cb4ea678e

  • SHA1

    e9f94456cc35d1f9b9aed0ae4f54c7502d0b710b

  • SHA256

    5faa54d8b5f46409ccbbd36d455cc3bb978c83049bae3687fd962fe78ac4ad8c

  • SHA512

    e003db972ed674b8bcd17e6ad815fdc818b5c84e6e788eb86350b909a7680a3b975f6e43ebecd8ce6370de5e83093f0206ef0202802f42458d879163ac3a1423

  • SSDEEP

    12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4F:JyHv5Z+Wzv7AiBll0OBWi6si9GU

Score
8/10
upx

Malware Config

Targets

    • Target

      5faa54d8b5f46409ccbbd36d455cc3bb978c83049bae3687fd962fe78ac4ad8c

    • Size

      935KB

    • MD5

      cf69bb76aec3df4bb7b2f86cb4ea678e

    • SHA1

      e9f94456cc35d1f9b9aed0ae4f54c7502d0b710b

    • SHA256

      5faa54d8b5f46409ccbbd36d455cc3bb978c83049bae3687fd962fe78ac4ad8c

    • SHA512

      e003db972ed674b8bcd17e6ad815fdc818b5c84e6e788eb86350b909a7680a3b975f6e43ebecd8ce6370de5e83093f0206ef0202802f42458d879163ac3a1423

    • SSDEEP

      12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4F:JyHv5Z+Wzv7AiBll0OBWi6si9GU

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks