General

  • Target

    2024-06-15_fec07485307d66707462e27e933b022b_mafia

  • Size

    1015KB

  • Sample

    240615-nqgk7aygke

  • MD5

    fec07485307d66707462e27e933b022b

  • SHA1

    4c939776ab380b9ab5fb591876fefe1ae152a8dd

  • SHA256

    4b32128cb41c32b40bc21d0b3ea20b432ac508fec3419333998442da2fd2ba22

  • SHA512

    e95cca41f5ef09eec1c73ed3e6ebc9000fdb7c15b29c2705d513cc345f73c56c848537c9bae0fbae6661fdd3f76ab0a40f6fe1673d12fd262c8e440c126ebdf8

  • SSDEEP

    24576:0aXNJQVJvxC3ZeobLzB/3gQvExFpdhC55AKDqsc53vTiixSc:EJvCZx7B/gkUrMvLqscVhxv

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-15_fec07485307d66707462e27e933b022b_mafia

    • Size

      1015KB

    • MD5

      fec07485307d66707462e27e933b022b

    • SHA1

      4c939776ab380b9ab5fb591876fefe1ae152a8dd

    • SHA256

      4b32128cb41c32b40bc21d0b3ea20b432ac508fec3419333998442da2fd2ba22

    • SHA512

      e95cca41f5ef09eec1c73ed3e6ebc9000fdb7c15b29c2705d513cc345f73c56c848537c9bae0fbae6661fdd3f76ab0a40f6fe1673d12fd262c8e440c126ebdf8

    • SSDEEP

      24576:0aXNJQVJvxC3ZeobLzB/3gQvExFpdhC55AKDqsc53vTiixSc:EJvCZx7B/gkUrMvLqscVhxv

    Score
    9/10
    • UPX dump on OEP (original entry point)

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks