General

  • Target

    3.exe

  • Size

    27.7MB

  • Sample

    241119-rk27gswqfy

  • MD5

    e516566b25ae853edd6aad00854d782a

  • SHA1

    868bc5e3b851337eb9094de303e395fc5be8d7ae

  • SHA256

    9cb2b6cafc2c6ec61d2f997789e7a923d71b8663f57a531820d958971f8a8e84

  • SHA512

    7b631df7d1786f901669869020430a2caa7b8fc493c5331a00137f60af0827e8c42638a89f1381aed2954bc0b280a1591a0561ba3aad5503f541d8ca12f466c5

  • SSDEEP

    393216:aT903qKSVL/D0mOWBLGZz1cVeN1zSuCK+RO4b61B2YpLlsmb2wIoV1Keejdnd:ah0OVL/rBLGp1JdCr6zRlsm1IoV1G9d

Score
7/10

Malware Config

Targets

    • Target

      3.exe

    • Size

      27.7MB

    • MD5

      e516566b25ae853edd6aad00854d782a

    • SHA1

      868bc5e3b851337eb9094de303e395fc5be8d7ae

    • SHA256

      9cb2b6cafc2c6ec61d2f997789e7a923d71b8663f57a531820d958971f8a8e84

    • SHA512

      7b631df7d1786f901669869020430a2caa7b8fc493c5331a00137f60af0827e8c42638a89f1381aed2954bc0b280a1591a0561ba3aad5503f541d8ca12f466c5

    • SSDEEP

      393216:aT903qKSVL/D0mOWBLGZz1cVeN1zSuCK+RO4b61B2YpLlsmb2wIoV1Keejdnd:ah0OVL/rBLGp1JdCr6zRlsm1IoV1G9d

    Score
    7/10
    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks