Overview

overview

10

Static

static

c92d71e425...c0.exe

windows7-x64

10

c92d71e425...c0.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    c92d71e425ca1072d85a03de563313ad5eed9044c855a925d4005dcc1b60e5c0

  • Size

    288KB

  • Sample

    221002-ffg5zahda6

  • MD5

    72089e20c481a1ad56fa9433afa1f0f0

  • SHA1

    c49444ced568c3ba3d049da43c6decae54ef046a

  • SHA256

    c92d71e425ca1072d85a03de563313ad5eed9044c855a925d4005dcc1b60e5c0

  • SHA512

    23f4d5b73e167562b628bae24a35466c4b1c2b2336264568ccc05f3aa189177c775a91f61995c44105a8680d62f22639a5d34e9eb4a8185e02d1a368cfb1d018

  • SSDEEP

    3072:2xf02hqbJ1y4GNq5jz+/YiMaRzKMr36FfKl/9Ayye+v6dYoR0OqHOeXzN:MqHGoq/TMTMeW/9JD+wR0OqueDN

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      c92d71e425ca1072d85a03de563313ad5eed9044c855a925d4005dcc1b60e5c0

    • Size

      288KB

    • MD5

      72089e20c481a1ad56fa9433afa1f0f0

    • SHA1

      c49444ced568c3ba3d049da43c6decae54ef046a

    • SHA256

      c92d71e425ca1072d85a03de563313ad5eed9044c855a925d4005dcc1b60e5c0

    • SHA512

      23f4d5b73e167562b628bae24a35466c4b1c2b2336264568ccc05f3aa189177c775a91f61995c44105a8680d62f22639a5d34e9eb4a8185e02d1a368cfb1d018

    • SSDEEP

      3072:2xf02hqbJ1y4GNq5jz+/YiMaRzKMr36FfKl/9Ayye+v6dYoR0OqHOeXzN:MqHGoq/TMTMeW/9JD+wR0OqueDN

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks