General

  • Target

    5edf61f1e9392d862f2c82ef7087ee07e0456dc0043acc8423a3b149ce5f2ccd

  • Size

    935KB

  • Sample

    221125-pxm7zscc4x

  • MD5

    db2344daf6b8d52409ea0fdce7cf40d4

  • SHA1

    8488481554933b8d060fcb28abe07bb7c6cd539a

  • SHA256

    5edf61f1e9392d862f2c82ef7087ee07e0456dc0043acc8423a3b149ce5f2ccd

  • SHA512

    8c27c6a13bde96afd49efe786627197e0bc9418a9f41dc6e6148415b49b84e38a72002dc5159196bf3245c88064a197943ea502f2c41afb71416bc72f900f678

  • SSDEEP

    12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:JyHv5Z+Wzv7AiBll0OBWi6si9G

Score
8/10
upx

Malware Config

Targets

    • Target

      5edf61f1e9392d862f2c82ef7087ee07e0456dc0043acc8423a3b149ce5f2ccd

    • Size

      935KB

    • MD5

      db2344daf6b8d52409ea0fdce7cf40d4

    • SHA1

      8488481554933b8d060fcb28abe07bb7c6cd539a

    • SHA256

      5edf61f1e9392d862f2c82ef7087ee07e0456dc0043acc8423a3b149ce5f2ccd

    • SHA512

      8c27c6a13bde96afd49efe786627197e0bc9418a9f41dc6e6148415b49b84e38a72002dc5159196bf3245c88064a197943ea502f2c41afb71416bc72f900f678

    • SSDEEP

      12288:J5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:JyHv5Z+Wzv7AiBll0OBWi6si9G

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks