Overview

overview

8

Static

static

d6dc7d435a...72.dll

windows7-x64

8

d6dc7d435a...72.dll

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6dc7d435a8450c5f112f8745db046cc917edfbf2ad413fabe07c79ece3ebd72

  • Size

    98KB

  • Sample

    221003-ayyyjshca8

  • MD5

    09b8d6fdf951d160bd45c6c08caca470

  • SHA1

    239358156e35f1aadc0ed04f15cd06f02ec7f005

  • SHA256

    d6dc7d435a8450c5f112f8745db046cc917edfbf2ad413fabe07c79ece3ebd72

  • SHA512

    3af3a53ff87446e5d37ee0dda9f9c5f8cb24b5e95fb3d9b7cbd9c78ada7f8304ef496773191480ad12a762f278a709ceb32d1fdecc1265197793572cf2e9f8f1

  • SSDEEP

    1536:d19ifU1d+iIt8u5f07194xy2C2oKSAmmeTdmt8B9avx/gbGqNe2gEi/J:d19iM1dktZk4xVCjnDmeTAV5Y5eFEix

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      d6dc7d435a8450c5f112f8745db046cc917edfbf2ad413fabe07c79ece3ebd72

    • Size

      98KB

    • MD5

      09b8d6fdf951d160bd45c6c08caca470

    • SHA1

      239358156e35f1aadc0ed04f15cd06f02ec7f005

    • SHA256

      d6dc7d435a8450c5f112f8745db046cc917edfbf2ad413fabe07c79ece3ebd72

    • SHA512

      3af3a53ff87446e5d37ee0dda9f9c5f8cb24b5e95fb3d9b7cbd9c78ada7f8304ef496773191480ad12a762f278a709ceb32d1fdecc1265197793572cf2e9f8f1

    • SSDEEP

      1536:d19ifU1d+iIt8u5f07194xy2C2oKSAmmeTdmt8B9avx/gbGqNe2gEi/J:d19iM1dktZk4xVCjnDmeTAV5Y5eFEix

    Score
    8/10
    discoverypersistenceupx

    • Blocklisted process makes network request

    • Sets DLL path for service in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks