General

  • Target

    2024-06-16_5a20c0a6001736583e32b05ed6cb601a_mafia

  • Size

    1015KB

  • Sample

    240616-lq1yqaydph

  • MD5

    5a20c0a6001736583e32b05ed6cb601a

  • SHA1

    2542f9c9e0f4980dba5f2b8c21f41eb88be91b24

  • SHA256

    f73e6dc616b4a2ea71bf8c80506995ef5aae97515456791e60dc77e648d765c7

  • SHA512

    814dc37a93c1e14497b2e515ede31f3e3439550db0a48bb75cd9054928f9fd78d047532a5053b9509949c8a317ca0fc93e97a56410da4cf49929e8e154130694

  • SSDEEP

    24576:jaXNJQVJvxC3ZtobLzB/3gQvExFpdhC55AKDqsc53vTkO/YF:hJvCZa7B/gkUrMvLqscVF/U

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-16_5a20c0a6001736583e32b05ed6cb601a_mafia

    • Size

      1015KB

    • MD5

      5a20c0a6001736583e32b05ed6cb601a

    • SHA1

      2542f9c9e0f4980dba5f2b8c21f41eb88be91b24

    • SHA256

      f73e6dc616b4a2ea71bf8c80506995ef5aae97515456791e60dc77e648d765c7

    • SHA512

      814dc37a93c1e14497b2e515ede31f3e3439550db0a48bb75cd9054928f9fd78d047532a5053b9509949c8a317ca0fc93e97a56410da4cf49929e8e154130694

    • SSDEEP

      24576:jaXNJQVJvxC3ZtobLzB/3gQvExFpdhC55AKDqsc53vTkO/YF:hJvCZa7B/gkUrMvLqscVF/U

    Score
    9/10
    • UPX dump on OEP (original entry point)

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks