Overview

overview

9

Static

static

5e519efcf0...05.exe

windows7-x64

9

5e519efcf0...05.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    5e519efcf0b462583d27be914ff29c93a9af432a4b98996f1b41069d87a92d05

  • Size

    255KB

  • Sample

    221010-3q2cxsefaq

  • MD5

    6dc9d5018df6db88c73694b4935b7c80

  • SHA1

    a3ccb83cdeba5c3f8f33222c66faab0f566ef10e

  • SHA256

    5e519efcf0b462583d27be914ff29c93a9af432a4b98996f1b41069d87a92d05

  • SHA512

    86a2719259c22f62cb901f2e603a3b4a25b929d041f600993f28ba5c486dca8fe725faf2895cabd7e2cccc7fd912b838ba69b7cfc4b58fdca6900557ef8c1610

  • SSDEEP

    3072:+GR8Y6hDaAyQIrZBbSJ27ml1LKt/ndVwkr+zXVUYRom8SbR:+GR8Y6lpYyludrCFUcom8iR

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      5e519efcf0b462583d27be914ff29c93a9af432a4b98996f1b41069d87a92d05

    • Size

      255KB

    • MD5

      6dc9d5018df6db88c73694b4935b7c80

    • SHA1

      a3ccb83cdeba5c3f8f33222c66faab0f566ef10e

    • SHA256

      5e519efcf0b462583d27be914ff29c93a9af432a4b98996f1b41069d87a92d05

    • SHA512

      86a2719259c22f62cb901f2e603a3b4a25b929d041f600993f28ba5c486dca8fe725faf2895cabd7e2cccc7fd912b838ba69b7cfc4b58fdca6900557ef8c1610

    • SSDEEP

      3072:+GR8Y6hDaAyQIrZBbSJ27ml1LKt/ndVwkr+zXVUYRom8SbR:+GR8Y6lpYyludrCFUcom8iR

    Score
    9/10
    persistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks