Overview

overview

9

Static

static

9

de9a5e3002...59.dll

windows7-x64

9

de9a5e3002...59.dll

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    de9a5e300260b3bc5ebb435bf76ce9e2783266471f853c3e7cb3a8e3070a7e59

  • Size

    40KB

  • Sample

    221011-v5gcasfff6

  • MD5

    26e48730429eca96ce1bfe31646e60a0

  • SHA1

    4ebbe74998c3e316d5c39946ef9b690e3e3ec0b8

  • SHA256

    de9a5e300260b3bc5ebb435bf76ce9e2783266471f853c3e7cb3a8e3070a7e59

  • SHA512

    838cbc56325a6acc6138996f0bd34c97aa2ca3024578f115f370fc98221b3b4c27bac0a19b39fc63705cc5aa23147586bd04c16938c30ffb9ca6307d39b83b67

  • SSDEEP

    768:UNiMUlGYU83FpeiFMogGgkwn9gsoJ7WXMG4b0Pg7x0yEnbcuyD7UE:U2lGMXFq3dn9g7FTwPgtOnouy8E

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      de9a5e300260b3bc5ebb435bf76ce9e2783266471f853c3e7cb3a8e3070a7e59

    • Size

      40KB

    • MD5

      26e48730429eca96ce1bfe31646e60a0

    • SHA1

      4ebbe74998c3e316d5c39946ef9b690e3e3ec0b8

    • SHA256

      de9a5e300260b3bc5ebb435bf76ce9e2783266471f853c3e7cb3a8e3070a7e59

    • SHA512

      838cbc56325a6acc6138996f0bd34c97aa2ca3024578f115f370fc98221b3b4c27bac0a19b39fc63705cc5aa23147586bd04c16938c30ffb9ca6307d39b83b67

    • SSDEEP

      768:UNiMUlGYU83FpeiFMogGgkwn9gsoJ7WXMG4b0Pg7x0yEnbcuyD7UE:U2lGMXFq3dn9g7FTwPgtOnouy8E

    Score
    9/10
    persistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks