Overview

overview

8

Static

static

8

0f8ba8b3d1...c5.exe

windows7-x64

8

0f8ba8b3d1...c5.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f8ba8b3d14e8d823c2daaa728b62dd3392b9dd297bd0bd081d5f8ffec90acc5

  • Size

    85KB

  • Sample

    221030-gry4asfhgp

  • MD5

    936b3450aad167eab25b9dc9f80a0b44

  • SHA1

    20021055e1e66e41f747d7099aa6e977c32d56b8

  • SHA256

    0f8ba8b3d14e8d823c2daaa728b62dd3392b9dd297bd0bd081d5f8ffec90acc5

  • SHA512

    dea25ea303c148de243c4f8c382dc6c570c8aec89dd9484969049621c3d42226ee56d2f24ea3abe26d43625974b26aa8a23b6662b66ad47ce0fd46127fb73e61

  • SSDEEP

    1536:8PFYgIzz2OQdfgB3KEkWAfN8pO2D1hjuWOmeVXQVVzL:/ZzIQZk9fN8RjurfgV9

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      0f8ba8b3d14e8d823c2daaa728b62dd3392b9dd297bd0bd081d5f8ffec90acc5

    • Size

      85KB

    • MD5

      936b3450aad167eab25b9dc9f80a0b44

    • SHA1

      20021055e1e66e41f747d7099aa6e977c32d56b8

    • SHA256

      0f8ba8b3d14e8d823c2daaa728b62dd3392b9dd297bd0bd081d5f8ffec90acc5

    • SHA512

      dea25ea303c148de243c4f8c382dc6c570c8aec89dd9484969049621c3d42226ee56d2f24ea3abe26d43625974b26aa8a23b6662b66ad47ce0fd46127fb73e61

    • SSDEEP

      1536:8PFYgIzz2OQdfgB3KEkWAfN8pO2D1hjuWOmeVXQVVzL:/ZzIQZk9fN8RjurfgV9

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks