Overview

overview

8

Static

static

8

2d50270baa...88.exe

windows7-x64

8

2d50270baa...88.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    2d50270baa75e9df982add37932945cdc7e68b86978453541f1f3cc792f37c88

  • Size

    869KB

  • Sample

    221028-21qthabeej

  • MD5

    0caebaed99cbf64ae8b1e12bf80c7478

  • SHA1

    ae3982c96e2f212d0e4556df5d0b3494a0861f49

  • SHA256

    2d50270baa75e9df982add37932945cdc7e68b86978453541f1f3cc792f37c88

  • SHA512

    1ec18628a983517b46d9f7d9dc725a74233250bad75a931349e37d7e948fd2cb0889b5c8e04117a63ec00466cd1051feaafad9a6596b1fe1564faadec56050d3

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjkG:r5sJo6YrFUiyAak11LtjkG

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      2d50270baa75e9df982add37932945cdc7e68b86978453541f1f3cc792f37c88

    • Size

      869KB

    • MD5

      0caebaed99cbf64ae8b1e12bf80c7478

    • SHA1

      ae3982c96e2f212d0e4556df5d0b3494a0861f49

    • SHA256

      2d50270baa75e9df982add37932945cdc7e68b86978453541f1f3cc792f37c88

    • SHA512

      1ec18628a983517b46d9f7d9dc725a74233250bad75a931349e37d7e948fd2cb0889b5c8e04117a63ec00466cd1051feaafad9a6596b1fe1564faadec56050d3

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjkG:r5sJo6YrFUiyAak11LtjkG

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks