Overview

overview

8

Static

static

8

30d58d02f5...3f.exe

windows7-x64

8

30d58d02f5...3f.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    30d58d02f526aed469f451047d319d8be262914bf3160dc6e6131670c05c823f

  • Size

    1.1MB

  • Sample

    220919-d87j8aefd4

  • MD5

    302e3af6259be0458eff015c24bc1f95

  • SHA1

    ebaf07c25654ce06e53b2e78c0f68b258cbd7085

  • SHA256

    30d58d02f526aed469f451047d319d8be262914bf3160dc6e6131670c05c823f

  • SHA512

    1a2be70c96567e59f846371dc5f76abe2b6ca48ec986438ee240da61846bf2cde02ba699b08ce7df3c58c56c4db9abf65904fbbf17e02a6b1d2f69153153403e

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjI6HANUTNr5:r5sJo6YrFUiyAak11LtjI25

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      30d58d02f526aed469f451047d319d8be262914bf3160dc6e6131670c05c823f

    • Size

      1.1MB

    • MD5

      302e3af6259be0458eff015c24bc1f95

    • SHA1

      ebaf07c25654ce06e53b2e78c0f68b258cbd7085

    • SHA256

      30d58d02f526aed469f451047d319d8be262914bf3160dc6e6131670c05c823f

    • SHA512

      1a2be70c96567e59f846371dc5f76abe2b6ca48ec986438ee240da61846bf2cde02ba699b08ce7df3c58c56c4db9abf65904fbbf17e02a6b1d2f69153153403e

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjI6HANUTNr5:r5sJo6YrFUiyAak11LtjI25

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks