General

  • Target

    5faa20ddf5383da13bf43f22ddf4e095ff72a0a8497c8ff0c37789b7bf9d0fd4

  • Size

    931KB

  • Sample

    221125-pwfrhsha38

  • MD5

    f07676667651fa64339a8301cfb4bbe0

  • SHA1

    2b87f6542c2222249fab668daa75f01ae52c1016

  • SHA256

    5faa20ddf5383da13bf43f22ddf4e095ff72a0a8497c8ff0c37789b7bf9d0fd4

  • SHA512

    5f4d1c8549979685f57fc9b8df710a39f051585e8c8efbe83820ee962d2a30c26c3bc38b92e44c513b521caffc993418b6b4a014156e1de45968eedf327db0ad

  • SSDEEP

    24576:C6IMwPvmB/wWq+5DUTt7FGSwmpu8nL6YKe:C6j19rut7FoU56E

Score
8/10
upx

Malware Config

Targets

    • Target

      5faa20ddf5383da13bf43f22ddf4e095ff72a0a8497c8ff0c37789b7bf9d0fd4

    • Size

      931KB

    • MD5

      f07676667651fa64339a8301cfb4bbe0

    • SHA1

      2b87f6542c2222249fab668daa75f01ae52c1016

    • SHA256

      5faa20ddf5383da13bf43f22ddf4e095ff72a0a8497c8ff0c37789b7bf9d0fd4

    • SHA512

      5f4d1c8549979685f57fc9b8df710a39f051585e8c8efbe83820ee962d2a30c26c3bc38b92e44c513b521caffc993418b6b4a014156e1de45968eedf327db0ad

    • SSDEEP

      24576:C6IMwPvmB/wWq+5DUTt7FGSwmpu8nL6YKe:C6j19rut7FoU56E

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Peripheral Device Discovery

1
T1120

Tasks