Overview

overview

10

Static

static

225525fdef...cb.exe

windows7-x64

8

225525fdef...cb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    225525fdef157fa546f9f850b913bf12f076f340cadf053e218498bbb82453cb

  • Size

    298KB

  • Sample

    221021-am4dwschd5

  • MD5

    4d5bf190bcbb3f04bdaa39a33f98a5f1

  • SHA1

    44bdd5d7e09a1e459634581e7ed54286c589631c

  • SHA256

    225525fdef157fa546f9f850b913bf12f076f340cadf053e218498bbb82453cb

  • SHA512

    5439a537af5f7af50a914aa26d94d5899f373852b50b61aff4f6e3f98c1b1ba7c54e30dbb953596913aca98571340b2ec6933342a7f9e9e9123264b774fb4164

  • SSDEEP

    6144:i+xDVG0BplADyMz4bO24KZ/Ws5Ng++wPZu/+T/0Nr:ha0B78y9brZZOsA++GZ4gI

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      225525fdef157fa546f9f850b913bf12f076f340cadf053e218498bbb82453cb

    • Size

      298KB

    • MD5

      4d5bf190bcbb3f04bdaa39a33f98a5f1

    • SHA1

      44bdd5d7e09a1e459634581e7ed54286c589631c

    • SHA256

      225525fdef157fa546f9f850b913bf12f076f340cadf053e218498bbb82453cb

    • SHA512

      5439a537af5f7af50a914aa26d94d5899f373852b50b61aff4f6e3f98c1b1ba7c54e30dbb953596913aca98571340b2ec6933342a7f9e9e9123264b774fb4164

    • SSDEEP

      6144:i+xDVG0BplADyMz4bO24KZ/Ws5Ng++wPZu/+T/0Nr:ha0B78y9brZZOsA++GZ4gI

    Score
    10/10
    evasionupx

    • Modifies firewall policy service

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks