Overview

overview

8

Static

static

winprofile

windows7_x64

8

winprofile

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    239188ccb58064385d07c0f11ff848cbf605f040f51a06dc102e78f7b2b3d17a

  • Size

    942KB

  • Sample

    220705-158pfafec5

  • MD5

    a92015618b79adee683000eaaaa30c83

  • SHA1

    fd2c04199f3e58c13bd2876bf38702ba3f172f75

  • SHA256

    239188ccb58064385d07c0f11ff848cbf605f040f51a06dc102e78f7b2b3d17a

  • SHA512

    5a82b48b223b6aa518aca74e2b6342045436e483f3a82c57d1ba236b257ce1c80a826e345a0b600796a0164e55a2d286f5b2e0183ef0662b8e96e89d173faa65

Score
8/10
upx

Malware Config

Targets

    • Target

      239188ccb58064385d07c0f11ff848cbf605f040f51a06dc102e78f7b2b3d17a

    • Size

      942KB

    • MD5

      a92015618b79adee683000eaaaa30c83

    • SHA1

      fd2c04199f3e58c13bd2876bf38702ba3f172f75

    • SHA256

      239188ccb58064385d07c0f11ff848cbf605f040f51a06dc102e78f7b2b3d17a

    • SHA512

      5a82b48b223b6aa518aca74e2b6342045436e483f3a82c57d1ba236b257ce1c80a826e345a0b600796a0164e55a2d286f5b2e0183ef0662b8e96e89d173faa65

    Score
    8/10
    upx

    • Downloads MZ/PE file

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks