General

  • Target

    119fd328b6b40e3e5a118b1584ca1b0125861236fb229a5fa6b573db5ddc35ce

  • Size

    935KB

  • Sample

    221125-thnbnahh78

  • MD5

    b852e467dd05a15b9fd9865cc11e658e

  • SHA1

    f80ece1f9a612ff9ef58ba6e3fcb02aea5d37e69

  • SHA256

    119fd328b6b40e3e5a118b1584ca1b0125861236fb229a5fa6b573db5ddc35ce

  • SHA512

    1b29b44203e1e0ef7017c30c41f943c611e1fed2d6043f0fa9939b20920f6c2fd7b90c2a757688d2dc0dd0db4d0951f52599f6650b0dc0b8f8e782c4f7bb8cf4

  • SSDEEP

    12288:Z5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x49:ZyHv5Z+Wzv7AiBll0OBWi6si9Gw

Score
8/10
upx

Malware Config

Targets

    • Target

      119fd328b6b40e3e5a118b1584ca1b0125861236fb229a5fa6b573db5ddc35ce

    • Size

      935KB

    • MD5

      b852e467dd05a15b9fd9865cc11e658e

    • SHA1

      f80ece1f9a612ff9ef58ba6e3fcb02aea5d37e69

    • SHA256

      119fd328b6b40e3e5a118b1584ca1b0125861236fb229a5fa6b573db5ddc35ce

    • SHA512

      1b29b44203e1e0ef7017c30c41f943c611e1fed2d6043f0fa9939b20920f6c2fd7b90c2a757688d2dc0dd0db4d0951f52599f6650b0dc0b8f8e782c4f7bb8cf4

    • SSDEEP

      12288:Z5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x49:ZyHv5Z+Wzv7AiBll0OBWi6si9Gw

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks