Overview

overview

8

Static

static

8

dbb56c259b...1e.exe

windows7-x64

8

dbb56c259b...1e.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    dbb56c259b5b9ff1e4493f3d83e7ec60759a927806da664aa82c7774279b041e

  • Size

    689KB

  • Sample

    221020-x429gsbcdn

  • MD5

    818fee0c96b96958f1561085ad9a0980

  • SHA1

    4a632f5d0c2e449797a7034aa8bc1a283bf31ff3

  • SHA256

    dbb56c259b5b9ff1e4493f3d83e7ec60759a927806da664aa82c7774279b041e

  • SHA512

    9cdee9a9417bf000b88c9fa2021597f7325205bdca011cc050a8a1a8936ef08d489ac94d0a871733bb3fc79c4876e92001ee3b8606dceecbe09c01f3cfdb95d4

  • SSDEEP

    12288:98xWeXXITbuDRZEh35Qfy+CLsYaoW7kHJGgD8MXvgrzQF/b6vr5XMdONKM8hHaAz:98x5X4T6+oioYaosK8+g2I5XMdONKM+F

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      dbb56c259b5b9ff1e4493f3d83e7ec60759a927806da664aa82c7774279b041e

    • Size

      689KB

    • MD5

      818fee0c96b96958f1561085ad9a0980

    • SHA1

      4a632f5d0c2e449797a7034aa8bc1a283bf31ff3

    • SHA256

      dbb56c259b5b9ff1e4493f3d83e7ec60759a927806da664aa82c7774279b041e

    • SHA512

      9cdee9a9417bf000b88c9fa2021597f7325205bdca011cc050a8a1a8936ef08d489ac94d0a871733bb3fc79c4876e92001ee3b8606dceecbe09c01f3cfdb95d4

    • SSDEEP

      12288:98xWeXXITbuDRZEh35Qfy+CLsYaoW7kHJGgD8MXvgrzQF/b6vr5XMdONKM8hHaAz:98x5X4T6+oioYaosK8+g2I5XMdONKM+F

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks