Overview

overview

8

Static

static

87860d1bff...a6.exe

windows7-x64

8

87860d1bff...a6.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    87860d1bff8fbebcbfcf1424dfab7ad3a7072c91ddce158f20473af2a3f06ea6

  • Size

    401KB

  • Sample

    221029-xvmgnsbdb4

  • MD5

    84e2de84004992d1b16addb3c307a94d

  • SHA1

    5441fee4bf99ab5f9b149d6691c9274e847cef02

  • SHA256

    87860d1bff8fbebcbfcf1424dfab7ad3a7072c91ddce158f20473af2a3f06ea6

  • SHA512

    6d2d457ed21450321c2b2d66db4c8fb723e9b38f9043dbe21c986c317ce45999dafa7a3e03fe07d2ad8b0b0f1ea04a62a8835284f1482591e8d3425927110593

  • SSDEEP

    12288:slhzlptFvg3h+VuV7ohA3kD/NBWBGgl/EYwww:slRlBg3h+GuskDV3g9

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      87860d1bff8fbebcbfcf1424dfab7ad3a7072c91ddce158f20473af2a3f06ea6

    • Size

      401KB

    • MD5

      84e2de84004992d1b16addb3c307a94d

    • SHA1

      5441fee4bf99ab5f9b149d6691c9274e847cef02

    • SHA256

      87860d1bff8fbebcbfcf1424dfab7ad3a7072c91ddce158f20473af2a3f06ea6

    • SHA512

      6d2d457ed21450321c2b2d66db4c8fb723e9b38f9043dbe21c986c317ce45999dafa7a3e03fe07d2ad8b0b0f1ea04a62a8835284f1482591e8d3425927110593

    • SSDEEP

      12288:slhzlptFvg3h+VuV7ohA3kD/NBWBGgl/EYwww:slRlBg3h+GuskDV3g9

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks