General

  • Target

    2024-06-11_dfb05b884fc89d58b2b6116f0b95ac79_mafia

  • Size

    1015KB

  • Sample

    240611-b25e6sygre

  • MD5

    dfb05b884fc89d58b2b6116f0b95ac79

  • SHA1

    0504306091bfca36740044819eb96f7b74e71e10

  • SHA256

    c2839326d92a38b7f2d6e681b21e2f21e0aee24fc616e056488cc277fea47596

  • SHA512

    d5efa98fbed55cbd81a6aa918c283050d26ff474d2a5e5f48ef5947e09fa518fac30091b3bf2acc726c9e58ba39e49f5ad56a857653124338b2dd0d0ac64e317

  • SSDEEP

    24576:daXNJQVJvxC3ZqobLzB/3gQvExFpdhC55AKDqsc53vTkO/Yv:PJvCZt7B/gkUrMvLqscVF/a

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-11_dfb05b884fc89d58b2b6116f0b95ac79_mafia

    • Size

      1015KB

    • MD5

      dfb05b884fc89d58b2b6116f0b95ac79

    • SHA1

      0504306091bfca36740044819eb96f7b74e71e10

    • SHA256

      c2839326d92a38b7f2d6e681b21e2f21e0aee24fc616e056488cc277fea47596

    • SHA512

      d5efa98fbed55cbd81a6aa918c283050d26ff474d2a5e5f48ef5947e09fa518fac30091b3bf2acc726c9e58ba39e49f5ad56a857653124338b2dd0d0ac64e317

    • SSDEEP

      24576:daXNJQVJvxC3ZqobLzB/3gQvExFpdhC55AKDqsc53vTkO/Yv:PJvCZt7B/gkUrMvLqscVF/a

    Score
    9/10
    • UPX dump on OEP (original entry point)

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks