Overview

overview

8

Static

static

8

808d471881...07.exe

windows7-x64

8

808d471881...07.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    808d471881706c2f8bc293e0235810559a98e1899183d3100bc4d19e00e7e807

  • Size

    125KB

  • Sample

    221106-sbx2vaadek

  • MD5

    0e1171d200a5aeedade00035a10adde0

  • SHA1

    35527c0e533dea5b74d0db05c9669367130557e1

  • SHA256

    808d471881706c2f8bc293e0235810559a98e1899183d3100bc4d19e00e7e807

  • SHA512

    ab5434b62249136049df5cc827cdae402fced8a766206d8d37baa4220f37a3f43d57bc7fab35fbb62180ad68d89b53c0ef7f4cb38fe82af8b94d2f1c3d401603

  • SSDEEP

    3072:IyrN/sVywaEj1UsEOBYJwyrN/sVywaEj1UsShK/2nkmL:Nh9wv1Ut3nh9wv1U7MikmL

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      808d471881706c2f8bc293e0235810559a98e1899183d3100bc4d19e00e7e807

    • Size

      125KB

    • MD5

      0e1171d200a5aeedade00035a10adde0

    • SHA1

      35527c0e533dea5b74d0db05c9669367130557e1

    • SHA256

      808d471881706c2f8bc293e0235810559a98e1899183d3100bc4d19e00e7e807

    • SHA512

      ab5434b62249136049df5cc827cdae402fced8a766206d8d37baa4220f37a3f43d57bc7fab35fbb62180ad68d89b53c0ef7f4cb38fe82af8b94d2f1c3d401603

    • SSDEEP

      3072:IyrN/sVywaEj1UsEOBYJwyrN/sVywaEj1UsShK/2nkmL:Nh9wv1Ut3nh9wv1U7MikmL

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks