Overview

overview

8

Static

static

642f3111a6...4c.exe

windows7-x64

8

642f3111a6...4c.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    642f3111a602c4ee6bbafd25303bbd1755d367c2f753a5c743aa18aee0f7d94c

  • Size

    164KB

  • Sample

    221029-j9sqcahgen

  • MD5

    055be775d65d6b4e62b01c1ad2c82926

  • SHA1

    971e18f37753f8133ce35b40e18e56483b805fb9

  • SHA256

    642f3111a602c4ee6bbafd25303bbd1755d367c2f753a5c743aa18aee0f7d94c

  • SHA512

    8d3a2d424031fca24a262bc933681b887726e8daf4a1e73d9ddb057b3103df3afaf6b7dec0e6d517499ba8456738a9b301dc3791383cfe7e12b6f4e68f8b9f51

  • SSDEEP

    3072:5YuN8NMTZFeXA/Qb0sTPREC172rbHVWm/F69jn3oKJPEIEJwS:v8e2AiTPREg2X1WaMjn3oPJ

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      642f3111a602c4ee6bbafd25303bbd1755d367c2f753a5c743aa18aee0f7d94c

    • Size

      164KB

    • MD5

      055be775d65d6b4e62b01c1ad2c82926

    • SHA1

      971e18f37753f8133ce35b40e18e56483b805fb9

    • SHA256

      642f3111a602c4ee6bbafd25303bbd1755d367c2f753a5c743aa18aee0f7d94c

    • SHA512

      8d3a2d424031fca24a262bc933681b887726e8daf4a1e73d9ddb057b3103df3afaf6b7dec0e6d517499ba8456738a9b301dc3791383cfe7e12b6f4e68f8b9f51

    • SSDEEP

      3072:5YuN8NMTZFeXA/Qb0sTPREC172rbHVWm/F69jn3oKJPEIEJwS:v8e2AiTPREg2X1WaMjn3oPJ

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks