Resubmissions

19/09/2024, 14:09

240919-rf848sshnq 7

19/09/2024, 14:09

240919-rf5f2ssdkg 7

07/03/2021, 22:27

210307-bmjgcjrk7s 8

General

  • Target

    xp.exe

  • Size

    158KB

  • Sample

    210307-bmjgcjrk7s

  • MD5

    25650401b8b95d4c95a8eecdf530ff39

  • SHA1

    e1bcd6fc738271418946bf6ae5589d408cf1f4aa

  • SHA256

    cee26a7cf2c48b461b3e25a43f8f06640e8dab86deeacb5cbaf5abea7a2ae58f

  • SHA512

    ae2660ab60ddcb2aad56c5f72340c63945cb838d2a5e87d5119c77fe103be4b0906c62e09d8351ad19ec0faa5053997f8c6a141a1c6226d9785d3e52da6a567a

Score
8/10
upx

Malware Config

Targets

    • Target

      xp.exe

    • Size

      158KB

    • MD5

      25650401b8b95d4c95a8eecdf530ff39

    • SHA1

      e1bcd6fc738271418946bf6ae5589d408cf1f4aa

    • SHA256

      cee26a7cf2c48b461b3e25a43f8f06640e8dab86deeacb5cbaf5abea7a2ae58f

    • SHA512

      ae2660ab60ddcb2aad56c5f72340c63945cb838d2a5e87d5119c77fe103be4b0906c62e09d8351ad19ec0faa5053997f8c6a141a1c6226d9785d3e52da6a567a

    Score
    8/10
    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Deletes itself

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks