Overview

overview

9

Static

static

1

UserBenchMark.exe.zip

windows10-2004_x64

1

UserBenchMark.exe

windows10-2004_x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    UserBenchMark.exe.zip

  • Size

    8.0MB

  • Sample

    220706-m8wbmaeae3

  • MD5

    51862d36ec0c787873868b60807370d6

  • SHA1

    58f39d921d99139267e8b9a22ea8cc9d1bf4f879

  • SHA256

    ae3737ecedaa9dc3e3b727514f5bc18095b073ad7b7433e7d532c9c983249d29

  • SHA512

    975bb24e975c2619bbb6c2201fa113f3ac95370ac38c8cb09a4bc838c460b0031d0d1481e1f918dfec35851edbb64af94480e1df88f5b6fda3404a734bf102c8

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      UserBenchMark.exe.zip

    • Size

      8.0MB

    • MD5

      51862d36ec0c787873868b60807370d6

    • SHA1

      58f39d921d99139267e8b9a22ea8cc9d1bf4f879

    • SHA256

      ae3737ecedaa9dc3e3b727514f5bc18095b073ad7b7433e7d532c9c983249d29

    • SHA512

      975bb24e975c2619bbb6c2201fa113f3ac95370ac38c8cb09a4bc838c460b0031d0d1481e1f918dfec35851edbb64af94480e1df88f5b6fda3404a734bf102c8

    Score
    1/10
    behavioral1

    • Target

      UserBenchMark.exe

    • Size

      8.0MB

    • MD5

      dbaff0b66743700c94e2eab2dfaadf8b

    • SHA1

      6b2574856a92fd127f710801ea1d15a6bc314ac5

    • SHA256

      460445595e1f4d6e4b2efc8fb950c16ae737852189ea4363627784e865c17da9

    • SHA512

      87c4ac8bdbb45612c923b86e526e0575800afb7e56e988024135e394b1ccd9d64049354e4d09545bc27339695b643a12a88e832043bc3eeb9e7baa528bfa55c5

    Score
    9/10
    persistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks