Overview

overview

10

Static

static

SecuriteIn...70.exe

windows7_x64

10

SecuriteIn...70.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Artemis175FCBEDAD2D.30670.10021
  • Size 3.1MB
  • Sample220321-wvyn9shgdm
  • SHA256 06dbbdd3df2de3fba52f72cbac4c5d1e06f794de90a29fa7ea2f449e3a4fc37d
  • MD5 SHA1 SHA512
Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target
      SecuriteInfo.com.Artemis175FCBEDAD2D.30670.10021
    • Size 3.1MB
    • SHA256 06dbbdd3df2de3fba52f72cbac4c5d1e06f794de90a29fa7ea2f449e3a4fc37d
    • MD5 SHA1 SHA512
    Score
    10/10
    evasionpersistencetrojanupx

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Downloads MZ/PE file

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks