0f300f06b2c2e6a8dc541079866dbc1c4785c2cc5599b55b93aba364ba081f03 | Triage

Submit
Reports

Overview

overview

Static

static

8

0f300f06b2...03.exe

windows7-x64

0f300f06b2...03.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

0f300f06b2c2e6a8dc541079866dbc1c4785c2cc5599b55b93aba364ba081f03
Size

84KB
Sample

221106-tg1klaadd8
MD5

069d495cb11d31e8c9a5e91ca4be6f70
SHA1

149ac0406e95c104af0a650d86433986fc6d066b
SHA256

0f300f06b2c2e6a8dc541079866dbc1c4785c2cc5599b55b93aba364ba081f03
SHA512

e2c8301178c2cc2c65665a9deceb75faec6599a0b98457416f6b61d149b20b92e14c5cf81ff0c02da1c7f479c1de7f80396c806b25e96aa8b1e6807ba0b1bea1
SSDEEP

1536:DljDbCaiLqdNkAPfzTi+erX5Q4gg3z3k9QOJEGCPZA9:DljDbCaQUhrTg5Kg3Q9QKEGMi

Score

10^/10

evasion persistence upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

0f300f06b2c2e6a8dc541079866dbc1c4785c2cc5599b55b93aba364ba081f03.exe

Resource

win7-20220812-en

evasion persistence upx

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

0f300f06b2c2e6a8dc541079866dbc1c4785c2cc5599b55b93aba364ba081f03.exe

Resource

win10v2004-20220812-en

evasion persistence upx

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  0f300f06b2c2e6a8dc541079866dbc1c4785c2cc5599b55b93aba364ba081f03
- Size
  
  84KB
- MD5
  
  069d495cb11d31e8c9a5e91ca4be6f70
- SHA1
  
  149ac0406e95c104af0a650d86433986fc6d066b
- SHA256
  
  0f300f06b2c2e6a8dc541079866dbc1c4785c2cc5599b55b93aba364ba081f03
- SHA512
  
  e2c8301178c2cc2c65665a9deceb75faec6599a0b98457416f6b61d149b20b92e14c5cf81ff0c02da1c7f479c1de7f80396c806b25e96aa8b1e6807ba0b1bea1
- SSDEEP
  
  1536:DljDbCaiLqdNkAPfzTi+erX5Q4gg3z3k9QOJEGCPZA9:DljDbCaQUhrTg5Kg3Q9QKEGMi
Score

10^/10

evasion persistence upx
- Modifies system executable filetype association
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Change Default File Association

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2

evasionpersistenceupx

© 2018-2025

Terms | Privacy