Overview

overview

8

Static

static

9f6ea5446d...74.exe

windows7-x64

8

9f6ea5446d...74.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9f6ea5446d0c1458267f2821b7b50816b0de77065cbcff741aebab4d6922d874

  • Size

    277KB

  • Sample

    221019-qwslraaba7

  • MD5

    922b5441bfe0e1ca82dea43422b364fd

  • SHA1

    78cca8fee6129d2b88592178c5a092072d6f5401

  • SHA256

    9f6ea5446d0c1458267f2821b7b50816b0de77065cbcff741aebab4d6922d874

  • SHA512

    e308ba5a17e5f0542c8e0f972c7eccd943b9db21404067ddaa698566f721b3af48dc7bb39f2afd0c4dbdf75f16893a147260fca9664b656648e9df998d79ea08

  • SSDEEP

    6144:WlFq4VAyuwkK9afJ8Qn0WPP1o5G9gxToJgJCY+AzBlkitfqqK8SlmIqy1GJ:WlFzVdZk+afWaQG9MToiJC1Aw0LyUJ

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      9f6ea5446d0c1458267f2821b7b50816b0de77065cbcff741aebab4d6922d874

    • Size

      277KB

    • MD5

      922b5441bfe0e1ca82dea43422b364fd

    • SHA1

      78cca8fee6129d2b88592178c5a092072d6f5401

    • SHA256

      9f6ea5446d0c1458267f2821b7b50816b0de77065cbcff741aebab4d6922d874

    • SHA512

      e308ba5a17e5f0542c8e0f972c7eccd943b9db21404067ddaa698566f721b3af48dc7bb39f2afd0c4dbdf75f16893a147260fca9664b656648e9df998d79ea08

    • SSDEEP

      6144:WlFq4VAyuwkK9afJ8Qn0WPP1o5G9gxToJgJCY+AzBlkitfqqK8SlmIqy1GJ:WlFzVdZk+afWaQG9MToiJC1Aw0LyUJ

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks