Overview

overview

8

Static

static

8

1c08c4ef20...16.exe

windows7-x64

8

1c08c4ef20...16.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    1c08c4ef20dbaf184b511d3fbd33c3f7d36813b3a2e50db2e9c3dcf79d226816

  • Size

    363KB

  • Sample

    221029-ypkasscge9

  • MD5

    851a00c4849eb39c61c5fd7b030f221a

  • SHA1

    d645fb7ae6be0b549ebb334bb3c1bb1dc3739350

  • SHA256

    1c08c4ef20dbaf184b511d3fbd33c3f7d36813b3a2e50db2e9c3dcf79d226816

  • SHA512

    59aeaf1b6c1ff7691ff5d68797af8bd66dc7d823ab8a26ade0f1df57deb005431239d3b51e51981d85eee5dd3bea779f915ee015c3eac9f36923ef88c63c6b9f

  • SSDEEP

    6144:bVKWE/NmoyYzwat//CgKf5tdS7HqB1essHAGdvSEwmQe9tgQc04hSYbzTSRGWgF8:bHEUcwi//0jdoqB10AGd6EwxgTc00SY8

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      1c08c4ef20dbaf184b511d3fbd33c3f7d36813b3a2e50db2e9c3dcf79d226816

    • Size

      363KB

    • MD5

      851a00c4849eb39c61c5fd7b030f221a

    • SHA1

      d645fb7ae6be0b549ebb334bb3c1bb1dc3739350

    • SHA256

      1c08c4ef20dbaf184b511d3fbd33c3f7d36813b3a2e50db2e9c3dcf79d226816

    • SHA512

      59aeaf1b6c1ff7691ff5d68797af8bd66dc7d823ab8a26ade0f1df57deb005431239d3b51e51981d85eee5dd3bea779f915ee015c3eac9f36923ef88c63c6b9f

    • SSDEEP

      6144:bVKWE/NmoyYzwat//CgKf5tdS7HqB1essHAGdvSEwmQe9tgQc04hSYbzTSRGWgF8:bHEUcwi//0jdoqB10AGd6EwxgTc00SY8

    Score
    8/10
    persistenceupx

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks