General

  • Target

    3744d1e4e031064e249540143d11bde80cbfd3015c54ecfd06f3e348e39f3156

  • Size

    935KB

  • Sample

    221125-rrrz4agh6s

  • MD5

    950b4160cbefba2639ab0c80a0709e05

  • SHA1

    15480e90897b42a425398e18b6be3a8f76653b2b

  • SHA256

    3744d1e4e031064e249540143d11bde80cbfd3015c54ecfd06f3e348e39f3156

  • SHA512

    a1ee4ee1c5e2f8c4486dce2a7ec612bdf639aeda1a8cfc12306c6506648095d1a176372ae04dcfa2e0e4a51861b7c94d7e2d4da23e4fa5688e459d39e4ba3a19

  • SSDEEP

    12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4h:pyHv5Z+Wzv7AiBll0OBWi6si9G4

Score
8/10
upx

Malware Config

Targets

    • Target

      3744d1e4e031064e249540143d11bde80cbfd3015c54ecfd06f3e348e39f3156

    • Size

      935KB

    • MD5

      950b4160cbefba2639ab0c80a0709e05

    • SHA1

      15480e90897b42a425398e18b6be3a8f76653b2b

    • SHA256

      3744d1e4e031064e249540143d11bde80cbfd3015c54ecfd06f3e348e39f3156

    • SHA512

      a1ee4ee1c5e2f8c4486dce2a7ec612bdf639aeda1a8cfc12306c6506648095d1a176372ae04dcfa2e0e4a51861b7c94d7e2d4da23e4fa5688e459d39e4ba3a19

    • SSDEEP

      12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4h:pyHv5Z+Wzv7AiBll0OBWi6si9G4

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks