Overview

overview

8

Static

static

8

47482fc3d6...6b.exe

windows7-x64

8

47482fc3d6...6b.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    47482fc3d6f17c769dee1ccd1c498f9aa63ffc9e5ef6afd656ab783371f3db6b

  • Size

    894KB

  • Sample

    221020-venzfsebgp

  • MD5

    a00e6051b5e5965a3bd481c5b62313f0

  • SHA1

    b5d99d3ed3c2b9549ab675ae3a68b13fcac0f629

  • SHA256

    47482fc3d6f17c769dee1ccd1c498f9aa63ffc9e5ef6afd656ab783371f3db6b

  • SHA512

    b659d4baadb1b9517ac1149591aed6397d7edde91320cf7c445d15d21ad6056d8614b0a9fa0385c61db04ea39688be793d259d5ddcc8c4f72479fcbc5d6d2832

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjc:r5sJo6YrFUiyAak11Ltjc

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      47482fc3d6f17c769dee1ccd1c498f9aa63ffc9e5ef6afd656ab783371f3db6b

    • Size

      894KB

    • MD5

      a00e6051b5e5965a3bd481c5b62313f0

    • SHA1

      b5d99d3ed3c2b9549ab675ae3a68b13fcac0f629

    • SHA256

      47482fc3d6f17c769dee1ccd1c498f9aa63ffc9e5ef6afd656ab783371f3db6b

    • SHA512

      b659d4baadb1b9517ac1149591aed6397d7edde91320cf7c445d15d21ad6056d8614b0a9fa0385c61db04ea39688be793d259d5ddcc8c4f72479fcbc5d6d2832

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjc:r5sJo6YrFUiyAak11Ltjc

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks