General

  • Target

    5e2b443bb3ba2a2f97f69d26766ed5a64b9ed9a742451a27e13f54979aef4781

  • Size

    935KB

  • Sample

    221125-pydpyacc9w

  • MD5

    24a763828b1fc431d5dd98d90c4d32e3

  • SHA1

    ba7f7d620f0039b923eca4d636de9c59764e0a21

  • SHA256

    5e2b443bb3ba2a2f97f69d26766ed5a64b9ed9a742451a27e13f54979aef4781

  • SHA512

    d986968bc98bc03c3d83f4dab61143aa2aa051cdd0c5c7053db41b566a2a918c721938d45a523dd9de0ca032b0cee7a697503af9e6a6714ec1b340ce8a29de89

  • SSDEEP

    12288:Y5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:YyHv5Z+Wzv7AiBll0OBWi6si9G

Score
8/10
upx

Malware Config

Targets

    • Target

      5e2b443bb3ba2a2f97f69d26766ed5a64b9ed9a742451a27e13f54979aef4781

    • Size

      935KB

    • MD5

      24a763828b1fc431d5dd98d90c4d32e3

    • SHA1

      ba7f7d620f0039b923eca4d636de9c59764e0a21

    • SHA256

      5e2b443bb3ba2a2f97f69d26766ed5a64b9ed9a742451a27e13f54979aef4781

    • SHA512

      d986968bc98bc03c3d83f4dab61143aa2aa051cdd0c5c7053db41b566a2a918c721938d45a523dd9de0ca032b0cee7a697503af9e6a6714ec1b340ce8a29de89

    • SSDEEP

      12288:Y5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:YyHv5Z+Wzv7AiBll0OBWi6si9G

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks