Overview

overview

10

Static

static

2e1a5eb6bf...48.exe

windows7-x64

8

2e1a5eb6bf...48.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e1a5eb6bfdca44d2f488ea22b67197f0cd56be36b84465ebab7e9876a645c48

  • Size

    371KB

  • Sample

    221020-pvm47seag4

  • MD5

    902e2d4ae69e1316e28c0bf8b2cae856

  • SHA1

    586c8620d63fa26510ae0828c47bfd6c690f56c8

  • SHA256

    2e1a5eb6bfdca44d2f488ea22b67197f0cd56be36b84465ebab7e9876a645c48

  • SHA512

    df1c3f3214d6839144d866f8e2983e52be71d8c452782644169eb22e2721b79027a643ee15c9f96df8757c29aad4b36ed8073858743561ea38d5074e82bc4469

  • SSDEEP

    6144:3OTeHI8HiL7+f51G9mKbph21Dz0Yj2MIaETwgnHA:CeoGiLajGmIW130SHIpTwgg

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      2e1a5eb6bfdca44d2f488ea22b67197f0cd56be36b84465ebab7e9876a645c48

    • Size

      371KB

    • MD5

      902e2d4ae69e1316e28c0bf8b2cae856

    • SHA1

      586c8620d63fa26510ae0828c47bfd6c690f56c8

    • SHA256

      2e1a5eb6bfdca44d2f488ea22b67197f0cd56be36b84465ebab7e9876a645c48

    • SHA512

      df1c3f3214d6839144d866f8e2983e52be71d8c452782644169eb22e2721b79027a643ee15c9f96df8757c29aad4b36ed8073858743561ea38d5074e82bc4469

    • SSDEEP

      6144:3OTeHI8HiL7+f51G9mKbph21Dz0Yj2MIaETwgnHA:CeoGiLajGmIW130SHIpTwgg

    Score
    10/10
    upxevasion

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks