Overview

overview

8

Static

static

8

de84a8898a...64.exe

windows7-x64

8

de84a8898a...64.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    de84a8898ad6b6d695c690a4c7c990fe80c5bb9c52466ef785dd999493e77464

  • Size

    195KB

  • Sample

    221030-frwgqsechl

  • MD5

    a3672a01d73ffadb40c4812dde3165fb

  • SHA1

    28b32d69587ba98bb11aee9918db86ed76d4f9f7

  • SHA256

    de84a8898ad6b6d695c690a4c7c990fe80c5bb9c52466ef785dd999493e77464

  • SHA512

    8a9cd33eea7a338fefc2cacd56a74bc67918abf87924b537c724806c6f22f048f5020ba00829eea1d39b13e8d1188deeabf4ed849f52edccabbde1e44dbc727a

  • SSDEEP

    3072:yehTtZ9kkPehMLodvXzneVjiRGms+fu/37MbQ7BJNwWSQ8gX06kpT6jQZ:XVfzehFvXznekmf7R7BJeWSQZ0Rsjw

Score
8/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      de84a8898ad6b6d695c690a4c7c990fe80c5bb9c52466ef785dd999493e77464

    • Size

      195KB

    • MD5

      a3672a01d73ffadb40c4812dde3165fb

    • SHA1

      28b32d69587ba98bb11aee9918db86ed76d4f9f7

    • SHA256

      de84a8898ad6b6d695c690a4c7c990fe80c5bb9c52466ef785dd999493e77464

    • SHA512

      8a9cd33eea7a338fefc2cacd56a74bc67918abf87924b537c724806c6f22f048f5020ba00829eea1d39b13e8d1188deeabf4ed849f52edccabbde1e44dbc727a

    • SSDEEP

      3072:yehTtZ9kkPehMLodvXzneVjiRGms+fu/37MbQ7BJNwWSQ8gX06kpT6jQZ:XVfzehFvXznekmf7R7BJeWSQZ0Rsjw

    Score
    8/10
    evasionpersistencetrojanupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks