General

  • Target

    3de8ca8cd3503bd19a4d22cfc7873db79af140df4416f48fa7c44891daca8e5b

  • Size

    935KB

  • Sample

    221125-rgcsesgb5x

  • MD5

    bbc3d6b81d4f3b0024956b9da8683e0c

  • SHA1

    1d0db3a0ea36ffb74e07e5982f53592e6ae48382

  • SHA256

    3de8ca8cd3503bd19a4d22cfc7873db79af140df4416f48fa7c44891daca8e5b

  • SHA512

    ad3376b41856023a98f0a84fdf9045cf9b9df0a69f84a13019c25a5f01dc857800ca78c4de8d694dd969dc02e36e2eeb72549752b8bfab5ac558e1aac55f6695

  • SSDEEP

    12288:o5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4U:oyHv5Z+Wzv7AiBll0OBWi6si9GR

Score
8/10
upx

Malware Config

Targets

    • Target

      3de8ca8cd3503bd19a4d22cfc7873db79af140df4416f48fa7c44891daca8e5b

    • Size

      935KB

    • MD5

      bbc3d6b81d4f3b0024956b9da8683e0c

    • SHA1

      1d0db3a0ea36ffb74e07e5982f53592e6ae48382

    • SHA256

      3de8ca8cd3503bd19a4d22cfc7873db79af140df4416f48fa7c44891daca8e5b

    • SHA512

      ad3376b41856023a98f0a84fdf9045cf9b9df0a69f84a13019c25a5f01dc857800ca78c4de8d694dd969dc02e36e2eeb72549752b8bfab5ac558e1aac55f6695

    • SSDEEP

      12288:o5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4U:oyHv5Z+Wzv7AiBll0OBWi6si9GR

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks