Overview

overview

10

Static

static

8

85baadad3c...45.exe

windows7-x64

10

85baadad3c...45.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85baadad3c48a2c19164a1e3a9f28f7b7cdbe8955d981e0c8ab2e0c064d78145

  • Size

    298KB

  • Sample

    221003-jb8znsehaq

  • MD5

    6e9cdc0efec19ff6fb0f6cb52ad25da0

  • SHA1

    5c1dceb6a99fcc322d9efb4377c0b65725bcef52

  • SHA256

    85baadad3c48a2c19164a1e3a9f28f7b7cdbe8955d981e0c8ab2e0c064d78145

  • SHA512

    2094aaa7f0aebed0a24b427419a2439db84e6e73242902360ec17164efd29b5d3bd4b75a5b6e9fe9f5daa1bbfccc23b946e8a4be2c85a68ff9c99cfec4e3c831

  • SSDEEP

    6144:suIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLqIYz:H6Wq4aaE6KwyF5L0Y2D1PqLk

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      85baadad3c48a2c19164a1e3a9f28f7b7cdbe8955d981e0c8ab2e0c064d78145

    • Size

      298KB

    • MD5

      6e9cdc0efec19ff6fb0f6cb52ad25da0

    • SHA1

      5c1dceb6a99fcc322d9efb4377c0b65725bcef52

    • SHA256

      85baadad3c48a2c19164a1e3a9f28f7b7cdbe8955d981e0c8ab2e0c064d78145

    • SHA512

      2094aaa7f0aebed0a24b427419a2439db84e6e73242902360ec17164efd29b5d3bd4b75a5b6e9fe9f5daa1bbfccc23b946e8a4be2c85a68ff9c99cfec4e3c831

    • SSDEEP

      6144:suIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLqIYz:H6Wq4aaE6KwyF5L0Y2D1PqLk

    Score
    10/10
    evasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks