General

  • Target

    2024-06-12_e60a5aad993de01fbfb21326a7c27cea_mafia

  • Size

    1015KB

  • Sample

    240612-prwl6svdph

  • MD5

    e60a5aad993de01fbfb21326a7c27cea

  • SHA1

    7adeb41d49d15863edf1f68487643cedd2732b6a

  • SHA256

    30fcc9a40dfaf79d394e9f2fae1a5758659edeaf2b44baac514f0fd68352a71c

  • SHA512

    544393d4a7492178f125244c351d2c898b51e094c901b9248ddd8a2ed7ced74ddd30086c4a6f874d015db91a66cf487204546df6fa5d1e64eef7d9b629b53a1a

  • SSDEEP

    24576:saXNJQVJvxC3ZCobLzB/3gQvExFpdhC55AKDqsc53vTkO/Kf:MJvCZ17B/gkUrMvLqscVF/Q

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-12_e60a5aad993de01fbfb21326a7c27cea_mafia

    • Size

      1015KB

    • MD5

      e60a5aad993de01fbfb21326a7c27cea

    • SHA1

      7adeb41d49d15863edf1f68487643cedd2732b6a

    • SHA256

      30fcc9a40dfaf79d394e9f2fae1a5758659edeaf2b44baac514f0fd68352a71c

    • SHA512

      544393d4a7492178f125244c351d2c898b51e094c901b9248ddd8a2ed7ced74ddd30086c4a6f874d015db91a66cf487204546df6fa5d1e64eef7d9b629b53a1a

    • SSDEEP

      24576:saXNJQVJvxC3ZCobLzB/3gQvExFpdhC55AKDqsc53vTkO/Kf:MJvCZ17B/gkUrMvLqscVF/Q

    Score
    9/10
    • UPX dump on OEP (original entry point)

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks