Overview

overview

10

Static

static

8

2603459c3d...9e.exe

windows7-x64

10

2603459c3d...9e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2603459c3d299245808157ec2da6dc0c939fdefd5d115477a69cb2e7f4dd9a9e

  • Size

    401KB

  • Sample

    221029-fmrmzscab4

  • MD5

    12f00baaa019295de8d12306afc32074

  • SHA1

    14e0e0317ae965a2012fe98bcf155c70230e46cc

  • SHA256

    2603459c3d299245808157ec2da6dc0c939fdefd5d115477a69cb2e7f4dd9a9e

  • SHA512

    b8dfa50aae6d5a5ee2e6bfd7d951dd517301876cae9b4e33129270b2b6cd3817c39b98aba63446ff0ac261f470040ac491c21b33adf72dd57b6156c18eca1460

  • SSDEEP

    6144:5uHOr/UOPSe570Szp3b/UOPSe570Szp3Znmy+g4IE2EBE2E4:gOwOB0vOB06aM4

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      2603459c3d299245808157ec2da6dc0c939fdefd5d115477a69cb2e7f4dd9a9e

    • Size

      401KB

    • MD5

      12f00baaa019295de8d12306afc32074

    • SHA1

      14e0e0317ae965a2012fe98bcf155c70230e46cc

    • SHA256

      2603459c3d299245808157ec2da6dc0c939fdefd5d115477a69cb2e7f4dd9a9e

    • SHA512

      b8dfa50aae6d5a5ee2e6bfd7d951dd517301876cae9b4e33129270b2b6cd3817c39b98aba63446ff0ac261f470040ac491c21b33adf72dd57b6156c18eca1460

    • SSDEEP

      6144:5uHOr/UOPSe570Szp3b/UOPSe570Szp3Znmy+g4IE2EBE2E4:gOwOB0vOB06aM4

    Score
    10/10
    evasionpersistenceupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks