Overview

overview

10

Static

static

8

4974e35e6f...bf.exe

windows7-x64

10

4974e35e6f...bf.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    4974e35e6f803e1d881d41d29e8d3e707e1e8068e1cd3225a8d50c3f3c5e14bf

  • Size

    234KB

  • Sample

    221004-jrnnnsabg7

  • MD5

    5734b40b6f413721d9976ef53c665050

  • SHA1

    8fbb207ba114a11a2ded50060190db9a054af90a

  • SHA256

    4974e35e6f803e1d881d41d29e8d3e707e1e8068e1cd3225a8d50c3f3c5e14bf

  • SHA512

    b195dfeca4ecada61efcc5c00527e0c336fcae3e6e810e74ee084104d10f971558aea4164fa93ebaa1e1b420419c581322b48145eb3db164af354229a716239a

  • SSDEEP

    6144:2xV8dI3bxRETtXaz/OJepymej5viyT5O/q9DUGEyoSI:2n8dI3b7ETtKKepymejF5aeDUGNoSI

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      4974e35e6f803e1d881d41d29e8d3e707e1e8068e1cd3225a8d50c3f3c5e14bf

    • Size

      234KB

    • MD5

      5734b40b6f413721d9976ef53c665050

    • SHA1

      8fbb207ba114a11a2ded50060190db9a054af90a

    • SHA256

      4974e35e6f803e1d881d41d29e8d3e707e1e8068e1cd3225a8d50c3f3c5e14bf

    • SHA512

      b195dfeca4ecada61efcc5c00527e0c336fcae3e6e810e74ee084104d10f971558aea4164fa93ebaa1e1b420419c581322b48145eb3db164af354229a716239a

    • SSDEEP

      6144:2xV8dI3bxRETtXaz/OJepymej5viyT5O/q9DUGEyoSI:2n8dI3b7ETtKKepymejF5aeDUGNoSI

    Score
    10/10
    evasionupx

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks