Overview

overview

10

Static

static

8

ff09ec1ca6...6e.exe

windows7-x64

10

ff09ec1ca6...6e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff09ec1ca61f7f25fbf10b4d101e07e18ea3bbe4391ef60da6f30e9e2220f96e

  • Size

    740KB

  • Sample

    221021-ap2cbacgcl

  • MD5

    61b3f16c45de2cba5896160e3fd5c31e

  • SHA1

    7403465260d7578318fdcf88a21d4947adc58d10

  • SHA256

    ff09ec1ca61f7f25fbf10b4d101e07e18ea3bbe4391ef60da6f30e9e2220f96e

  • SHA512

    11a8d4011fb139843e4a7f8479b72a9337db5cb06575d7ae8d87a95cecf95c36a03b7ddaf0ebaf0a2537d78f6e7f9cb77e255dcc52ecdd6a096a129c1b50e9b9

  • SSDEEP

    12288:gOHeZJys73dOvXDpNjNe8zrKuTa4YOuDC6HTE:ReZJ8NI8zBhYZfE

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      ff09ec1ca61f7f25fbf10b4d101e07e18ea3bbe4391ef60da6f30e9e2220f96e

    • Size

      740KB

    • MD5

      61b3f16c45de2cba5896160e3fd5c31e

    • SHA1

      7403465260d7578318fdcf88a21d4947adc58d10

    • SHA256

      ff09ec1ca61f7f25fbf10b4d101e07e18ea3bbe4391ef60da6f30e9e2220f96e

    • SHA512

      11a8d4011fb139843e4a7f8479b72a9337db5cb06575d7ae8d87a95cecf95c36a03b7ddaf0ebaf0a2537d78f6e7f9cb77e255dcc52ecdd6a096a129c1b50e9b9

    • SSDEEP

      12288:gOHeZJys73dOvXDpNjNe8zrKuTa4YOuDC6HTE:ReZJ8NI8zBhYZfE

    Score
    10/10
    evasionpersistenceupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks