Overview

overview

10

Static

static

e5a238d412...8e.exe

windows7-x64

10

e5a238d412...8e.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e5a238d41230ed7872a656be5a4f5def3e5b3fbd1476569484ae170db962468e

  • Size

    446KB

  • Sample

    221003-vrdz1sgcbk

  • MD5

    61d21db5f88f364b2023aa4d6cdfdc78

  • SHA1

    80a61b9b95236ec2ad85d67c07542c86708c901e

  • SHA256

    e5a238d41230ed7872a656be5a4f5def3e5b3fbd1476569484ae170db962468e

  • SHA512

    9e10d29035345ecd5ef9e560b7b60af2fee14a86fec1df51f2e82b336877a65115c9b6de4b0629af0fa85b2dc40c870f69071a7ec15c57e4237783484c54cf6d

  • SSDEEP

    6144:V+xDVG0BpvnjFU2VfnEcgzvrioDGFkOR9xIEPLVG:Aa0BJnjFILzioyFkOfFG

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      e5a238d41230ed7872a656be5a4f5def3e5b3fbd1476569484ae170db962468e

    • Size

      446KB

    • MD5

      61d21db5f88f364b2023aa4d6cdfdc78

    • SHA1

      80a61b9b95236ec2ad85d67c07542c86708c901e

    • SHA256

      e5a238d41230ed7872a656be5a4f5def3e5b3fbd1476569484ae170db962468e

    • SHA512

      9e10d29035345ecd5ef9e560b7b60af2fee14a86fec1df51f2e82b336877a65115c9b6de4b0629af0fa85b2dc40c870f69071a7ec15c57e4237783484c54cf6d

    • SSDEEP

      6144:V+xDVG0BpvnjFU2VfnEcgzvrioDGFkOR9xIEPLVG:Aa0BJnjFILzioyFkOfFG

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks