General

  • Target
    good.bin.zip
  • Size 118KB
  • Sample220423-grslhsaff8
  • SHA256 96e4a33925c4917776179db1ea0e432c8a790fac52c4a2014066fea0bde0edc0
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      good.bin
    • Size 143KB
    • SHA256 90d3580e187b631a9150bbb4a640b84c6fa990437febdc42f687cc7b3ce1deac
    • MD5 SHA1 SHA512
    • Modifies Windows Defender Real-time Protection settings

    • Phorphiex Worm

      Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    • Windows security bypass

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Windows security modification

    • Adds Run key to start application

    • Target
      out.upx
    • Size 266KB
    • SHA256 7f12d8502c88112a227dd460e61a24f5c363f4bb8fec0f72ed432ead21842fb6
    • MD5 SHA1 SHA512
    Score
    3/10

MITRE ATT&CK Enterprise v6

Tasks