Overview

overview

10

Static

static

7f211f8b4a...8d.dll

windows7-x64

10

7f211f8b4a...8d.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f211f8b4a085511e585652eb54771b81382316da9bb7e111781e174dfd4928d

  • Size

    460KB

  • Sample

    221011-2l6w6shfd3

  • MD5

    68a1ef9c40147a51507a1114a9006c89

  • SHA1

    6e5d7210b4547c66bf0d105f301ca46f34f3009f

  • SHA256

    7f211f8b4a085511e585652eb54771b81382316da9bb7e111781e174dfd4928d

  • SHA512

    f0025b92cd61d8f8703503058d59ae5a6157a89565e710b02f5291efd2788f2fdc10aa43bd32ce6c2124dae7ba46532a34e442d733121de9938ba59146ef79c7

  • SSDEEP

    6144://gxI5p8RC6JL0OFLm1I7AV4COHEQeewQeelQeesQeeudQeefQeeZKwQBIoqhvJ8:AxI5QLM1aw4CIoqhKW6RIDUWKg/M

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      7f211f8b4a085511e585652eb54771b81382316da9bb7e111781e174dfd4928d

    • Size

      460KB

    • MD5

      68a1ef9c40147a51507a1114a9006c89

    • SHA1

      6e5d7210b4547c66bf0d105f301ca46f34f3009f

    • SHA256

      7f211f8b4a085511e585652eb54771b81382316da9bb7e111781e174dfd4928d

    • SHA512

      f0025b92cd61d8f8703503058d59ae5a6157a89565e710b02f5291efd2788f2fdc10aa43bd32ce6c2124dae7ba46532a34e442d733121de9938ba59146ef79c7

    • SSDEEP

      6144://gxI5p8RC6JL0OFLm1I7AV4COHEQeewQeelQeesQeeudQeefQeeZKwQBIoqhvJ8:AxI5QLM1aw4CIoqhKW6RIDUWKg/M

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks