Overview

overview

8

Static

static

8

da8fe9c91a...99.exe

windows7-x64

8

da8fe9c91a...99.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da8fe9c91a9e4db6043f8d49ac1f39fb21fff130ffdd4a013f643a6741757499

  • Size

    28KB

  • Sample

    221014-lh2v2shdcq

  • MD5

    6c3a2911ae77d62502e131a2974eb7b8

  • SHA1

    62a1f9c2f86ee0525530c0d61b3b1e5d5d9cc111

  • SHA256

    da8fe9c91a9e4db6043f8d49ac1f39fb21fff130ffdd4a013f643a6741757499

  • SHA512

    d94f4fb0ac32401b35a24b46fa1593dc2fdf73b75b71e190c79c9a8ca8c0b2d38ea1d4ad456481ba060d493fb780efdfd80a3c0d0f1850d3ac8e3e9f18ad9a29

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN7hEhd:Dv8IRRdsxq1DjJcqfShW

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      da8fe9c91a9e4db6043f8d49ac1f39fb21fff130ffdd4a013f643a6741757499

    • Size

      28KB

    • MD5

      6c3a2911ae77d62502e131a2974eb7b8

    • SHA1

      62a1f9c2f86ee0525530c0d61b3b1e5d5d9cc111

    • SHA256

      da8fe9c91a9e4db6043f8d49ac1f39fb21fff130ffdd4a013f643a6741757499

    • SHA512

      d94f4fb0ac32401b35a24b46fa1593dc2fdf73b75b71e190c79c9a8ca8c0b2d38ea1d4ad456481ba060d493fb780efdfd80a3c0d0f1850d3ac8e3e9f18ad9a29

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN7hEhd:Dv8IRRdsxq1DjJcqfShW

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks