Overview

overview

8

Static

static

ad416d58aa...5b.dll

windows7_x64

8

ad416d58aa...5b.dll

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    ad416d58aa5a4a822803554204a0085b.dll
  • Size 1.2MB
  • Sample201225-5x1byryvc6
  • SHA256 d19b02a35003c637360cc342d5fcdae87dc7336fc7925f07f5c0636eae22ba37
  • MD5 SHA1 SHA512
Score
8/10
persistenceupx

Malware Config

Targets

    • Target
      ad416d58aa5a4a822803554204a0085b.dll
    • Size 1.2MB
    • SHA256 d19b02a35003c637360cc342d5fcdae87dc7336fc7925f07f5c0636eae22ba37
    • MD5 SHA1 SHA512
    Score
    8/10
    persistenceupx

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Sets service image path in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks