General

  • Target

    1a017ee65fb496050ea755c93faf8667

  • Size

    625KB

  • Sample

    231230-qqnevahbbn

  • MD5

    1a017ee65fb496050ea755c93faf8667

  • SHA1

    da92d0b51ee717d255a95201e3834aac38f85fe7

  • SHA256

    136c6e28b879b1bf9d9ae90ee0d744e25a140afdee113139520e4cce00a59014

  • SHA512

    02c201b63765907208a43b6fed85e64d371ef04078a4d0ed458f08f9442fd54b76c41b518f89b62d5e8000867720f8910272f07221af4adab26d69360c2424b7

  • SSDEEP

    12288:ldVHdJP768IAxFHABvJ8Z/pCLLL0+Hsuq/R9hUJGP:ldVH/P7zx1ABh+pS//q59ew

Score
7/10

Malware Config

Targets

    • Target

      1a017ee65fb496050ea755c93faf8667

    • Size

      625KB

    • MD5

      1a017ee65fb496050ea755c93faf8667

    • SHA1

      da92d0b51ee717d255a95201e3834aac38f85fe7

    • SHA256

      136c6e28b879b1bf9d9ae90ee0d744e25a140afdee113139520e4cce00a59014

    • SHA512

      02c201b63765907208a43b6fed85e64d371ef04078a4d0ed458f08f9442fd54b76c41b518f89b62d5e8000867720f8910272f07221af4adab26d69360c2424b7

    • SSDEEP

      12288:ldVHdJP768IAxFHABvJ8Z/pCLLL0+Hsuq/R9hUJGP:ldVH/P7zx1ABh+pS//q59ew

    Score
    7/10
    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks