Overview

overview

8

Static

static

8

file43.exe

windows7_x64

8

file43.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file43.exe

  • Size

    3.4MB

  • Sample

    210610-j51j6q2bq2

  • MD5

    20bae96a81da0931c762d395e5c0a5ff

  • SHA1

    9f8848cc00cf226e3ae2de6895ebbc0f36887672

  • SHA256

    9188a061f6c59b9358fc15da09c8c55178c98401f6b08804e7ad7c0df529a9a3

  • SHA512

    41bc89c68f5e8d86b9f5f6c72312b9802ea304d816a1d0361a36e1e6a9314b825f9eff7c9d47b6554f487efe7a05614a07ffa80fa06509f23dcca6fb25da4197

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      file43.exe

    • Size

      3.4MB

    • MD5

      20bae96a81da0931c762d395e5c0a5ff

    • SHA1

      9f8848cc00cf226e3ae2de6895ebbc0f36887672

    • SHA256

      9188a061f6c59b9358fc15da09c8c55178c98401f6b08804e7ad7c0df529a9a3

    • SHA512

      41bc89c68f5e8d86b9f5f6c72312b9802ea304d816a1d0361a36e1e6a9314b825f9eff7c9d47b6554f487efe7a05614a07ffa80fa06509f23dcca6fb25da4197

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks