Overview

overview

8

Static

static

8

tmp/f4de45...ll.exe

windows7_x64

8

tmp/f4de45...ll.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp/f4de4515362780e816d36c0f00eb33a56cf6a6017056203141c48d4768211dc6.dll

  • Size

    552KB

  • Sample

    211207-rcx8kahhhl

  • MD5

    323748eb9deb7938331738d3ec405485

  • SHA1

    4130428897cce80623d1e1f772df245bb69f8dec

  • SHA256

    f4de4515362780e816d36c0f00eb33a56cf6a6017056203141c48d4768211dc6

  • SHA512

    a5cce16dcd8e5248ca6baee457603dd1a45dab1a07af01f2de9fafb5ca6ba8c6d43b0438f13fb9413679565380ff005a3ba290f9a4c3a154b41d1f4747f9170b

Score
8/10
upx

Malware Config

Targets

    • Target

      tmp/f4de4515362780e816d36c0f00eb33a56cf6a6017056203141c48d4768211dc6.dll

    • Size

      552KB

    • MD5

      323748eb9deb7938331738d3ec405485

    • SHA1

      4130428897cce80623d1e1f772df245bb69f8dec

    • SHA256

      f4de4515362780e816d36c0f00eb33a56cf6a6017056203141c48d4768211dc6

    • SHA512

      a5cce16dcd8e5248ca6baee457603dd1a45dab1a07af01f2de9fafb5ca6ba8c6d43b0438f13fb9413679565380ff005a3ba290f9a4c3a154b41d1f4747f9170b

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks