Overview

overview

10

Static

static

8

ea91bac458...02.exe

windows7-x64

10

ea91bac458...02.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ea91bac45839b45eff28bc8f12690e01cd1f330c298131a676c48376a8b1a602

  • Size

    353KB

  • Sample

    220919-qt6qlabae5

  • MD5

    17d14a82d2cade29bf24ca69d8a25c94

  • SHA1

    85ba85316a7476bfa8b23f91f050439e279fb90d

  • SHA256

    ea91bac45839b45eff28bc8f12690e01cd1f330c298131a676c48376a8b1a602

  • SHA512

    ff7ae22a0656f46e382e019163790b8f9c1b6fe89778b37bdf9333ab73a2f2b877b2a2a54c6a707dbb63e28a996cc4b6b5e3ee28422a42e311b3c4061e27dcc1

  • SSDEEP

    6144:0cSdt9qZyH+zJr7+pqczPIsUFLrNKIXLRtdrjVAit1Tz45hElND3Bc3ROIbExW3:5Gt9qZyezdKpqczPIsUF3YKZtAY1TzGB

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      ea91bac45839b45eff28bc8f12690e01cd1f330c298131a676c48376a8b1a602

    • Size

      353KB

    • MD5

      17d14a82d2cade29bf24ca69d8a25c94

    • SHA1

      85ba85316a7476bfa8b23f91f050439e279fb90d

    • SHA256

      ea91bac45839b45eff28bc8f12690e01cd1f330c298131a676c48376a8b1a602

    • SHA512

      ff7ae22a0656f46e382e019163790b8f9c1b6fe89778b37bdf9333ab73a2f2b877b2a2a54c6a707dbb63e28a996cc4b6b5e3ee28422a42e311b3c4061e27dcc1

    • SSDEEP

      6144:0cSdt9qZyH+zJr7+pqczPIsUFLrNKIXLRtdrjVAit1Tz45hElND3Bc3ROIbExW3:5Gt9qZyezdKpqczPIsUF3YKZtAY1TzGB

    Score
    10/10
    evasionpersistenceupx

    • Modifies firewall policy service

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks