Overview

overview

10

Static

static

5ece942d40...ef.exe

windows7-x64

10

5ece942d40...ef.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    5ece942d408c6a8d952f8e2a44c27ed06f70507e9799504b46729905e1df85ef

  • Size

    883KB

  • Sample

    221003-tsp81aedhq

  • MD5

    4d5ed8ccdbb3ee6aaf7ab5a1b62ed621

  • SHA1

    1516452009fb8e4eb9013053177b3704bf9b1a21

  • SHA256

    5ece942d408c6a8d952f8e2a44c27ed06f70507e9799504b46729905e1df85ef

  • SHA512

    473d60e9b3e534db3d6bbf645f8f6edd92ca320e3de7de887a00ba85650bd2bfac0489a857b366766324eb5c9a4966cd3c5af5467571362eff851093881a3655

  • SSDEEP

    12288:UfSiwACvLjBu7NzzZ11iyIfQyY0YjDg4WQqhUaJAgVwuWcnL9JxKQ23gx:UcAgw7Nzz0yIfRY0g+F6rdML9JxKQEgx

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      5ece942d408c6a8d952f8e2a44c27ed06f70507e9799504b46729905e1df85ef

    • Size

      883KB

    • MD5

      4d5ed8ccdbb3ee6aaf7ab5a1b62ed621

    • SHA1

      1516452009fb8e4eb9013053177b3704bf9b1a21

    • SHA256

      5ece942d408c6a8d952f8e2a44c27ed06f70507e9799504b46729905e1df85ef

    • SHA512

      473d60e9b3e534db3d6bbf645f8f6edd92ca320e3de7de887a00ba85650bd2bfac0489a857b366766324eb5c9a4966cd3c5af5467571362eff851093881a3655

    • SSDEEP

      12288:UfSiwACvLjBu7NzzZ11iyIfQyY0YjDg4WQqhUaJAgVwuWcnL9JxKQ23gx:UcAgw7Nzz0yIfRY0g+F6rdML9JxKQEgx

    Score
    10/10
    evasionpersistenceupx

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks