General

  • Target

    12dc1ed892a93d0184c3219dce4ee3eb1520dae8c0ca5c089b2335a67b62c747

  • Size

    935KB

  • Sample

    221125-tf15qshg92

  • MD5

    67e4c0bf77ee6a2ec2718a177767f24c

  • SHA1

    3ece000efcd6d0fd5a61a38c62cb101c48c24078

  • SHA256

    12dc1ed892a93d0184c3219dce4ee3eb1520dae8c0ca5c089b2335a67b62c747

  • SHA512

    1c9e92dd9fc7d0a3a9dc40220847cda73d313585d34895a6e46a97167736aecef255dd4189b8cf9296cf225502e6a5a19d9499de45b0983cf0c1b55863e7b613

  • SSDEEP

    12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:pyHv5Z+Wzv7AiBll0OBWi6si9G

Score
8/10
upx

Malware Config

Targets

    • Target

      12dc1ed892a93d0184c3219dce4ee3eb1520dae8c0ca5c089b2335a67b62c747

    • Size

      935KB

    • MD5

      67e4c0bf77ee6a2ec2718a177767f24c

    • SHA1

      3ece000efcd6d0fd5a61a38c62cb101c48c24078

    • SHA256

      12dc1ed892a93d0184c3219dce4ee3eb1520dae8c0ca5c089b2335a67b62c747

    • SHA512

      1c9e92dd9fc7d0a3a9dc40220847cda73d313585d34895a6e46a97167736aecef255dd4189b8cf9296cf225502e6a5a19d9499de45b0983cf0c1b55863e7b613

    • SSDEEP

      12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4:pyHv5Z+Wzv7AiBll0OBWi6si9G

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks