Overview

overview

8

Static

static

e0aed08883...7d.exe

windows7-x64

8

e0aed08883...7d.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    e0aed088839564c31a0ecef09f63329a07304d05e3ea3cd6b44ee04d3d4dcf7d

  • Size

    77KB

  • Sample

    221029-ml6h3scde3

  • MD5

    fb56a4f1f8a68dad6763d5e060a86149

  • SHA1

    261a396d632f0ce3142ccf1572f6b2cd4560789b

  • SHA256

    e0aed088839564c31a0ecef09f63329a07304d05e3ea3cd6b44ee04d3d4dcf7d

  • SHA512

    a06381ac0195c5b4e61c3126c431f5b39097ec22712a810f7ce0598cd78640f1238f71e9224f0a71d40b6a598b10bd8d4ecb8c40f9b64ba0e9155d15c47bb3a5

  • SSDEEP

    1536:AUHuE2VSGTS5YINmv53Snc3OivLF5/NzQqeBSnpwbOHmgE5Xq0:AUHuE2EGW5YIM3/e+FdNzoBZemgEs0

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      e0aed088839564c31a0ecef09f63329a07304d05e3ea3cd6b44ee04d3d4dcf7d

    • Size

      77KB

    • MD5

      fb56a4f1f8a68dad6763d5e060a86149

    • SHA1

      261a396d632f0ce3142ccf1572f6b2cd4560789b

    • SHA256

      e0aed088839564c31a0ecef09f63329a07304d05e3ea3cd6b44ee04d3d4dcf7d

    • SHA512

      a06381ac0195c5b4e61c3126c431f5b39097ec22712a810f7ce0598cd78640f1238f71e9224f0a71d40b6a598b10bd8d4ecb8c40f9b64ba0e9155d15c47bb3a5

    • SSDEEP

      1536:AUHuE2VSGTS5YINmv53Snc3OivLF5/NzQqeBSnpwbOHmgE5Xq0:AUHuE2EGW5YIM3/e+FdNzoBZemgEs0

    Score
    8/10
    persistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Modifies WinLogon

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks