Overview

overview

10

Static

static

4ea0ce5010...21.dll

windows7-x64

10

4ea0ce5010...21.dll

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    4ea0ce5010953b6802f03530990562806d9143d4e46aa94181f7f554cd02dd21

  • Size

    264KB

  • Sample

    221021-alzdjscfaj

  • MD5

    4d4d0ff5d86174ef08639d48442ae11f

  • SHA1

    6c882b7a83baa0bcc0aeeabe3fe132d09ea56cd2

  • SHA256

    4ea0ce5010953b6802f03530990562806d9143d4e46aa94181f7f554cd02dd21

  • SHA512

    b10ba607958df890984246e3976317c74bd6f98dc993a18c66618ab4211925afda9ef3115d3aaf9c53b0bcf54d74bec7d413ddf339ace9b33399e2e890f467b9

  • SSDEEP

    3072:KZmu9K33WSwdJ/tILtAPrL+oxdvTjD4NRSxEdlIkFmTkQV1FXRCSGufV0mlstx:K8b33QqUrSAo26c/1FCu90ms

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      4ea0ce5010953b6802f03530990562806d9143d4e46aa94181f7f554cd02dd21

    • Size

      264KB

    • MD5

      4d4d0ff5d86174ef08639d48442ae11f

    • SHA1

      6c882b7a83baa0bcc0aeeabe3fe132d09ea56cd2

    • SHA256

      4ea0ce5010953b6802f03530990562806d9143d4e46aa94181f7f554cd02dd21

    • SHA512

      b10ba607958df890984246e3976317c74bd6f98dc993a18c66618ab4211925afda9ef3115d3aaf9c53b0bcf54d74bec7d413ddf339ace9b33399e2e890f467b9

    • SSDEEP

      3072:KZmu9K33WSwdJ/tILtAPrL+oxdvTjD4NRSxEdlIkFmTkQV1FXRCSGufV0mlstx:K8b33QqUrSAo26c/1FCu90ms

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks