Overview

overview

10

Static

static

50bc7f06c3...55.exe

windows7-x64

10

50bc7f06c3...55.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    50bc7f06c3b0457a6d5d7429e4d7d9862bad985b03d29f71590d31519a773455

  • Size

    200KB

  • Sample

    220919-m1vp5adfe2

  • MD5

    598ece767bbfcbb50fab930f73181328

  • SHA1

    03855c129c067f1e6a9c3c988e55dbf2b564654b

  • SHA256

    50bc7f06c3b0457a6d5d7429e4d7d9862bad985b03d29f71590d31519a773455

  • SHA512

    c740679bc815b796f94f08c878e8b4aaa965a68d5fe8d608c97c420b9c39612b1bd42e596194504f67279e90478a40dbd19ceece699a7b5dc9ecd64c5187bb2b

  • SSDEEP

    3072:+YVOmdfNQBihJt7rR5gq20ZM4CtBRKTTMGCPDb4EPt05nwiYsNkYzMqUMAiNIYqz:+K7BR9s0Z67bRl0ZTDNkYgq31Gz

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      50bc7f06c3b0457a6d5d7429e4d7d9862bad985b03d29f71590d31519a773455

    • Size

      200KB

    • MD5

      598ece767bbfcbb50fab930f73181328

    • SHA1

      03855c129c067f1e6a9c3c988e55dbf2b564654b

    • SHA256

      50bc7f06c3b0457a6d5d7429e4d7d9862bad985b03d29f71590d31519a773455

    • SHA512

      c740679bc815b796f94f08c878e8b4aaa965a68d5fe8d608c97c420b9c39612b1bd42e596194504f67279e90478a40dbd19ceece699a7b5dc9ecd64c5187bb2b

    • SSDEEP

      3072:+YVOmdfNQBihJt7rR5gq20ZM4CtBRKTTMGCPDb4EPt05nwiYsNkYzMqUMAiNIYqz:+K7BR9s0Z67bRl0ZTDNkYgq31Gz

    Score
    10/10
    evasionpersistenceupx

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks