Overview

overview

8

Static

static

8

6d19f60648...54.exe

windows7-x64

8

6d19f60648...54.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    6d19f60648efeb820b3879fa11d3d790048aef349db36801fb88344f21461f54

  • Size

    199KB

  • Sample

    221003-x7p4bsceg7

  • MD5

    68d0ff0f4d234ee445016151b46cba98

  • SHA1

    7466b7e25bd98a6b6cd9e11d8cf0193a1314c955

  • SHA256

    6d19f60648efeb820b3879fa11d3d790048aef349db36801fb88344f21461f54

  • SHA512

    c79203a9914ff4e7eb83157dcedb3d1fad3241aecab25175b421540cbd8ee7ea2a4eb6aa4227e713a4cfbc3e8f6dc4909a35ffe6a6c706d3576887b6723ba143

  • SSDEEP

    3072:yTUtZpaaUJ7FlxTTUXdu/6NIqjRcNQl6O8frxtJ87htY4uc/F3mILCkJTV:2cpavHIfNXbb8fNtK/5/cILC0V

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      6d19f60648efeb820b3879fa11d3d790048aef349db36801fb88344f21461f54

    • Size

      199KB

    • MD5

      68d0ff0f4d234ee445016151b46cba98

    • SHA1

      7466b7e25bd98a6b6cd9e11d8cf0193a1314c955

    • SHA256

      6d19f60648efeb820b3879fa11d3d790048aef349db36801fb88344f21461f54

    • SHA512

      c79203a9914ff4e7eb83157dcedb3d1fad3241aecab25175b421540cbd8ee7ea2a4eb6aa4227e713a4cfbc3e8f6dc4909a35ffe6a6c706d3576887b6723ba143

    • SSDEEP

      3072:yTUtZpaaUJ7FlxTTUXdu/6NIqjRcNQl6O8frxtJ87htY4uc/F3mILCkJTV:2cpavHIfNXbb8fNtK/5/cILC0V

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks