Overview

overview

8

Static

static

8

56d891e14c...77.exe

windows7-x64

8

56d891e14c...77.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    56d891e14ca6b7d9c4bcfb9e8bf9bd92bf101a385c6930c73453d315511ebf77

  • Size

    837KB

  • Sample

    220919-d7tlzaafck

  • MD5

    0ef8276580cad54c96957aa93e1c49d0

  • SHA1

    d2e11232a29cedd265202cc5b8a9f3c35ae8ead7

  • SHA256

    56d891e14ca6b7d9c4bcfb9e8bf9bd92bf101a385c6930c73453d315511ebf77

  • SHA512

    09b55ba6071af8fe19fd0b4133ff65b5264bb6083ddf5ef8b55f989111e87c813e2d8f5b54d37ae01e266aee2dca9138e2e4e502ce0006d70b411010045586f6

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjw:r5sJo6YrFUiyAak11Ltjw

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      56d891e14ca6b7d9c4bcfb9e8bf9bd92bf101a385c6930c73453d315511ebf77

    • Size

      837KB

    • MD5

      0ef8276580cad54c96957aa93e1c49d0

    • SHA1

      d2e11232a29cedd265202cc5b8a9f3c35ae8ead7

    • SHA256

      56d891e14ca6b7d9c4bcfb9e8bf9bd92bf101a385c6930c73453d315511ebf77

    • SHA512

      09b55ba6071af8fe19fd0b4133ff65b5264bb6083ddf5ef8b55f989111e87c813e2d8f5b54d37ae01e266aee2dca9138e2e4e502ce0006d70b411010045586f6

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjw:r5sJo6YrFUiyAak11Ltjw

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks