Overview

overview

8

Static

static

495c2306c5...8e.exe

windows7-x64

8

495c2306c5...8e.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    495c2306c5733ecf5dbc90097f0f8c5adf6140efc41161387ef00b362ff6888e

  • Size

    556KB

  • Sample

    221106-myyzrsagan

  • MD5

    3ed7ac33d1fb6dcb3921f18808433a08

  • SHA1

    164ea35f0145a98318b3638cfc3871cd2aa25390

  • SHA256

    495c2306c5733ecf5dbc90097f0f8c5adf6140efc41161387ef00b362ff6888e

  • SHA512

    9a6d81d21fe18e91716f7ce55c95b72ff695f5132c52adac7018b9b1a43d9cac859115b473602ebe647dc234aea5b3538585a7337142e8766d00400211cb9931

  • SSDEEP

    3072:J4GSBN3SVlFgd2/I7ZDI85RKj6zgKf5TK3SVlFgd2/I7ZDYHS8KAgrO9R+f:J4GGN3OlOZDZ5Wg5u3OlOZDYHX5gCSf

Score
8/10
upx

Malware Config

Targets

    • Target

      495c2306c5733ecf5dbc90097f0f8c5adf6140efc41161387ef00b362ff6888e

    • Size

      556KB

    • MD5

      3ed7ac33d1fb6dcb3921f18808433a08

    • SHA1

      164ea35f0145a98318b3638cfc3871cd2aa25390

    • SHA256

      495c2306c5733ecf5dbc90097f0f8c5adf6140efc41161387ef00b362ff6888e

    • SHA512

      9a6d81d21fe18e91716f7ce55c95b72ff695f5132c52adac7018b9b1a43d9cac859115b473602ebe647dc234aea5b3538585a7337142e8766d00400211cb9931

    • SSDEEP

      3072:J4GSBN3SVlFgd2/I7ZDI85RKj6zgKf5TK3SVlFgd2/I7ZDYHS8KAgrO9R+f:J4GGN3OlOZDZ5Wg5u3OlOZDYHX5gCSf

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks