Overview

overview

8

Static

static

96319c25b9...9e.exe

windows7-x64

8

96319c25b9...9e.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    96319c25b90c8aafa3ad41b598870c46b38dedcb2eb41b1921c84d830db0419e

  • Size

    109KB

  • Sample

    221019-1418zaagb3

  • MD5

    91bdfdea01264c64ef11b04ea11487e0

  • SHA1

    b473dddfe57f513c296b31ac435e63c1a2d8055b

  • SHA256

    96319c25b90c8aafa3ad41b598870c46b38dedcb2eb41b1921c84d830db0419e

  • SHA512

    ff2a66fb40f51b6cc3348dd4a00db9aadc80aca76452eba556b8e564d6a1c3a644c907375b3c7460aae1ad3032f830a5a6d132286d384d487d2de09bcf1d0a6d

  • SSDEEP

    1536:ObAmatlbHUZU/lL0w07s/4TbgvHktE3nkGxPbodJL96HZ2QxOyY:ObAmatlYZJw01bMFw0Z2COV

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      96319c25b90c8aafa3ad41b598870c46b38dedcb2eb41b1921c84d830db0419e

    • Size

      109KB

    • MD5

      91bdfdea01264c64ef11b04ea11487e0

    • SHA1

      b473dddfe57f513c296b31ac435e63c1a2d8055b

    • SHA256

      96319c25b90c8aafa3ad41b598870c46b38dedcb2eb41b1921c84d830db0419e

    • SHA512

      ff2a66fb40f51b6cc3348dd4a00db9aadc80aca76452eba556b8e564d6a1c3a644c907375b3c7460aae1ad3032f830a5a6d132286d384d487d2de09bcf1d0a6d

    • SSDEEP

      1536:ObAmatlbHUZU/lL0w07s/4TbgvHktE3nkGxPbodJL96HZ2QxOyY:ObAmatlYZJw01bMFw0Z2COV

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks