Overview

overview

9

Static

static

20dfaa7b91...63.exe

windows7-x64

9

20dfaa7b91...63.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20dfaa7b918cc2c909d62d0a21ec316cbcf19465b52996b6108b4f13fb9ffd63

  • Size

    17.8MB

  • Sample

    221004-cw43wshbc4

  • MD5

    302ea2eb6976080c7aceb9f126b3198b

  • SHA1

    b9c7249d012b8b389019b10bc331956e915a50fd

  • SHA256

    20dfaa7b918cc2c909d62d0a21ec316cbcf19465b52996b6108b4f13fb9ffd63

  • SHA512

    f005363aabfceeff86c9bb77d5edc526f1449cdb16d9e519aaf8a53120a601e3234607f03d4645aee7aea7c06c06f0e54ad900fd5451e39bf3df604b1d8cb153

  • SSDEEP

    393216:BxS+VUvZBroodmKInI+D90kJNFG0o4z5jE74t6Dh9Tt4/wZ8Slpr/MY:BF2oodmKu3Z7noWjEph4oZ7rYY

Score
9/10
upx

Malware Config

Targets

    • Target

      20dfaa7b918cc2c909d62d0a21ec316cbcf19465b52996b6108b4f13fb9ffd63

    • Size

      17.8MB

    • MD5

      302ea2eb6976080c7aceb9f126b3198b

    • SHA1

      b9c7249d012b8b389019b10bc331956e915a50fd

    • SHA256

      20dfaa7b918cc2c909d62d0a21ec316cbcf19465b52996b6108b4f13fb9ffd63

    • SHA512

      f005363aabfceeff86c9bb77d5edc526f1449cdb16d9e519aaf8a53120a601e3234607f03d4645aee7aea7c06c06f0e54ad900fd5451e39bf3df604b1d8cb153

    • SSDEEP

      393216:BxS+VUvZBroodmKInI+D90kJNFG0o4z5jE74t6Dh9Tt4/wZ8Slpr/MY:BF2oodmKu3Z7noWjEph4oZ7rYY

    Score
    9/10
    upx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks