Overview

overview

8

Static

static

8

5efb6ae330...a2.exe

windows7-x64

8

5efb6ae330...a2.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5efb6ae3308199bb1f480305847332faa413a2b572507be38a9e69da609dc1a2

  • Size

    937KB

  • Sample

    221107-gd5nxsahf8

  • MD5

    0cb4f689b8f0f6291e107c81111b7d2d

  • SHA1

    4e4c7e95d90a9f97f89758b314104a3701c5bcfd

  • SHA256

    5efb6ae3308199bb1f480305847332faa413a2b572507be38a9e69da609dc1a2

  • SHA512

    36bb6bec1fc26ee92239dbe2ae8039c263c676e013969f6d7e2a995f4e4c698a83c32cf522e69ce831a680c789457aaccf648a06e93f9233a858e61fefb97c0e

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjlV:r5sJo6YrFUiyAak11LtjlV

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      5efb6ae3308199bb1f480305847332faa413a2b572507be38a9e69da609dc1a2

    • Size

      937KB

    • MD5

      0cb4f689b8f0f6291e107c81111b7d2d

    • SHA1

      4e4c7e95d90a9f97f89758b314104a3701c5bcfd

    • SHA256

      5efb6ae3308199bb1f480305847332faa413a2b572507be38a9e69da609dc1a2

    • SHA512

      36bb6bec1fc26ee92239dbe2ae8039c263c676e013969f6d7e2a995f4e4c698a83c32cf522e69ce831a680c789457aaccf648a06e93f9233a858e61fefb97c0e

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjlV:r5sJo6YrFUiyAak11LtjlV

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks