Overview

overview

8

Static

static

8

289678db67...99.exe

windows7-x64

8

289678db67...99.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    289678db6789290643ef77857155fb4704ce66daa0528b17d6d272a8a9c72199

  • Size

    178KB

  • Sample

    221030-x9x7qafga3

  • MD5

    a159090442eb03be4707ad611c7fb1f0

  • SHA1

    5aaf0b26e53a06db3de53e804b16e0ab8efe2311

  • SHA256

    289678db6789290643ef77857155fb4704ce66daa0528b17d6d272a8a9c72199

  • SHA512

    6aeb32d21a6c6cb3a8cf5ed5a3920c6ff5744ec4dabe37b84ae877e92227ae00d1213001eca39a5908703bb4663e4d2b1486a6b5a1662874d663be30a9633995

  • SSDEEP

    3072:IyrN/sVywaEj1UsEOBYJwyrN/sVywaEj1Us7b4NdkFGRzhjdBrXpzTjFn3UW:Nh9wv1Ut3nh9wv1UU4N+8RFBBrXpz1EW

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      289678db6789290643ef77857155fb4704ce66daa0528b17d6d272a8a9c72199

    • Size

      178KB

    • MD5

      a159090442eb03be4707ad611c7fb1f0

    • SHA1

      5aaf0b26e53a06db3de53e804b16e0ab8efe2311

    • SHA256

      289678db6789290643ef77857155fb4704ce66daa0528b17d6d272a8a9c72199

    • SHA512

      6aeb32d21a6c6cb3a8cf5ed5a3920c6ff5744ec4dabe37b84ae877e92227ae00d1213001eca39a5908703bb4663e4d2b1486a6b5a1662874d663be30a9633995

    • SSDEEP

      3072:IyrN/sVywaEj1UsEOBYJwyrN/sVywaEj1Us7b4NdkFGRzhjdBrXpzTjFn3UW:Nh9wv1Ut3nh9wv1UU4N+8RFBBrXpz1EW

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks