Overview

overview

10

Static

static

205789b236...70.exe

windows7-x64

10

205789b236...70.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    205789b2369cbe6830abb0867e773b3b3c7d96bb92240d08a94f2b9299ebd570

  • Size

    288KB

  • Sample

    221011-pj5vwadgc4

  • MD5

    7ab6afd9d3f07d15b607aff7ea05c4d2

  • SHA1

    32fe10a77f79722f16aaff58d6a7e15a9507de52

  • SHA256

    205789b2369cbe6830abb0867e773b3b3c7d96bb92240d08a94f2b9299ebd570

  • SHA512

    6361d62d7642cc515ad36b61e942279dc1f765281d1e6b593978430e4be0eefce737576ed86bff2a1452f57a00c5fdaece20604f4f5033b5a7d2a0794fb70fa2

  • SSDEEP

    3072:Xxf02hqbJ1y4GNq5jz+/YiMaRzKMr36FfKl/9Ayye+v6dYoR0OqHOeXzh:jqHGoq/TMTMeW/9JD+wR0OqueDh

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      205789b2369cbe6830abb0867e773b3b3c7d96bb92240d08a94f2b9299ebd570

    • Size

      288KB

    • MD5

      7ab6afd9d3f07d15b607aff7ea05c4d2

    • SHA1

      32fe10a77f79722f16aaff58d6a7e15a9507de52

    • SHA256

      205789b2369cbe6830abb0867e773b3b3c7d96bb92240d08a94f2b9299ebd570

    • SHA512

      6361d62d7642cc515ad36b61e942279dc1f765281d1e6b593978430e4be0eefce737576ed86bff2a1452f57a00c5fdaece20604f4f5033b5a7d2a0794fb70fa2

    • SSDEEP

      3072:Xxf02hqbJ1y4GNq5jz+/YiMaRzKMr36FfKl/9Ayye+v6dYoR0OqHOeXzh:jqHGoq/TMTMeW/9JD+wR0OqueDh

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks