Overview

overview

8

Static

static

8

255c0cc9e2...47.exe

windows7_x64

8

255c0cc9e2...47.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    255c0cc9e2e08306ddb6e4e4b087c539506648593c5059a3cf6e26ca2ab3ce47

  • Size

    688KB

  • Sample

    210513-ljj91hxhfx

  • MD5

    190575fd954db4c3a6681a52c6777b5d

  • SHA1

    fc0e9d53e4496f66773af98c2d1ec3784df9e2c2

  • SHA256

    255c0cc9e2e08306ddb6e4e4b087c539506648593c5059a3cf6e26ca2ab3ce47

  • SHA512

    2b21fc5fc3d483c3580e7a49f31eadea73d9c0c6d05989b48e3213042aa5d00c4ae4c96643dfe7122f0543b649b07b233bedf333b238ef28b1e9ad3b2e6bcf4f

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      255c0cc9e2e08306ddb6e4e4b087c539506648593c5059a3cf6e26ca2ab3ce47

    • Size

      688KB

    • MD5

      190575fd954db4c3a6681a52c6777b5d

    • SHA1

      fc0e9d53e4496f66773af98c2d1ec3784df9e2c2

    • SHA256

      255c0cc9e2e08306ddb6e4e4b087c539506648593c5059a3cf6e26ca2ab3ce47

    • SHA512

      2b21fc5fc3d483c3580e7a49f31eadea73d9c0c6d05989b48e3213042aa5d00c4ae4c96643dfe7122f0543b649b07b233bedf333b238ef28b1e9ad3b2e6bcf4f

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks