Overview

overview

8

Static

static

8

22eaefbb28...c0.exe

windows7-x64

8

22eaefbb28...c0.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22eaefbb288c2b367f1f7176fe56faf908c2ac2f8d21c20cb21abc3985856bc0

  • Size

    575KB

  • Sample

    221107-f1lznaacc6

  • MD5

    0f3e06b5e359b5b352ed985ffae6b4d7

  • SHA1

    98f466810027a23c2d1f8ade199916202296a8f7

  • SHA256

    22eaefbb288c2b367f1f7176fe56faf908c2ac2f8d21c20cb21abc3985856bc0

  • SHA512

    6715c789c74cc95a6da9fadfbad786d50d5fd6d6130deb4d0ec407385cea0a4e89fb06969e4b3f6f31999f239cbb1535473ae42bd14978865159d8ecdfee8d1a

  • SSDEEP

    12288:EDb22DShTEdjp2tzJdN81MJMddwjA0D0af2iFgKrqEy7:2K2eTEdczJdN81MJMddcA0D2itrqEA

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      22eaefbb288c2b367f1f7176fe56faf908c2ac2f8d21c20cb21abc3985856bc0

    • Size

      575KB

    • MD5

      0f3e06b5e359b5b352ed985ffae6b4d7

    • SHA1

      98f466810027a23c2d1f8ade199916202296a8f7

    • SHA256

      22eaefbb288c2b367f1f7176fe56faf908c2ac2f8d21c20cb21abc3985856bc0

    • SHA512

      6715c789c74cc95a6da9fadfbad786d50d5fd6d6130deb4d0ec407385cea0a4e89fb06969e4b3f6f31999f239cbb1535473ae42bd14978865159d8ecdfee8d1a

    • SSDEEP

      12288:EDb22DShTEdjp2tzJdN81MJMddwjA0D0af2iFgKrqEy7:2K2eTEdczJdN81MJMddcA0D2itrqEA

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks