General

  • Target

    3a072ded03f84b0f271d3ad58753137b334a686a4395a24ee905a492ef35ca92

  • Size

    931KB

  • Sample

    221125-rmybbagf2s

  • MD5

    be3fe970a70b650cb6a521cffa6eb474

  • SHA1

    b197808c9ddfd2d2bb79cfba3328c4762bd94d2e

  • SHA256

    3a072ded03f84b0f271d3ad58753137b334a686a4395a24ee905a492ef35ca92

  • SHA512

    b4115d7d185f542d3c37898a0deb39b21fefac742cc679e9d5c41fa19e1cf9a71a9ac699f138549d451304e5b3223d72f698f541fd5b1853526a76c792d51cfe

  • SSDEEP

    24576:C6IMwPvmB/wWq+5DUTt7FGSwmpu8nL6YKV:C6j19rut7FoU56H

Score
8/10
upx

Malware Config

Targets

    • Target

      3a072ded03f84b0f271d3ad58753137b334a686a4395a24ee905a492ef35ca92

    • Size

      931KB

    • MD5

      be3fe970a70b650cb6a521cffa6eb474

    • SHA1

      b197808c9ddfd2d2bb79cfba3328c4762bd94d2e

    • SHA256

      3a072ded03f84b0f271d3ad58753137b334a686a4395a24ee905a492ef35ca92

    • SHA512

      b4115d7d185f542d3c37898a0deb39b21fefac742cc679e9d5c41fa19e1cf9a71a9ac699f138549d451304e5b3223d72f698f541fd5b1853526a76c792d51cfe

    • SSDEEP

      24576:C6IMwPvmB/wWq+5DUTt7FGSwmpu8nL6YKV:C6j19rut7FoU56H

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks