Overview

overview

8

Static

static

a9203a42ab...0f.exe

windows7-x64

8

a9203a42ab...0f.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9203a42ab30a09c0892de1b0c78738957ecd97954f35ea8adef7416f358a80f

  • Size

    249KB

  • Sample

    221011-wgs7magecq

  • MD5

    08a9dfeef2d7e21e582c7b53a0a5382e

  • SHA1

    9b8dee9bd25b41104308e8a15d856d53f2decfb4

  • SHA256

    a9203a42ab30a09c0892de1b0c78738957ecd97954f35ea8adef7416f358a80f

  • SHA512

    bb2c5512c558f4d0cf710abe922db4dd6134a1d386e12d164585dddf98cdc397cad2d4daecdff3b0ab1a9ba48a41e4c35e17f4cb6c9421a7ca6c8c7eb3101b3f

  • SSDEEP

    6144:JUC7p/mXYZiFudvV8Bwq/H0ZkavDDqH42l:NJZd1YHSvDD+/

Score
8/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      a9203a42ab30a09c0892de1b0c78738957ecd97954f35ea8adef7416f358a80f

    • Size

      249KB

    • MD5

      08a9dfeef2d7e21e582c7b53a0a5382e

    • SHA1

      9b8dee9bd25b41104308e8a15d856d53f2decfb4

    • SHA256

      a9203a42ab30a09c0892de1b0c78738957ecd97954f35ea8adef7416f358a80f

    • SHA512

      bb2c5512c558f4d0cf710abe922db4dd6134a1d386e12d164585dddf98cdc397cad2d4daecdff3b0ab1a9ba48a41e4c35e17f4cb6c9421a7ca6c8c7eb3101b3f

    • SSDEEP

      6144:JUC7p/mXYZiFudvV8Bwq/H0ZkavDDqH42l:NJZd1YHSvDD+/

    Score
    8/10
    evasionpersistenceupx

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks