Overview

overview

8

Static

static

8

478ff855f6...69.exe

windows7-x64

8

478ff855f6...69.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69

  • Size

    76KB

  • Sample

    221107-jeqmhagfel

  • MD5

    0ff2332684f222fe1466d80265428d8d

  • SHA1

    b31e87e4eb24a96aa799ff8d31b4482cc2c1cf09

  • SHA256

    478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69

  • SHA512

    d5350fc0f29de60208afedc298bf12201655c8f31e821d6ea2c4f4e8e1c23ed6a2b61ad4c0b8885e3c626292a8a6459d3e6038e3f7171653ac32f7077d9a11f6

  • SSDEEP

    1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSpO4AmCL3i9YYY8/x:5JjcF8KfCOcjk+guPVjSpXd19Y7m

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69

    • Size

      76KB

    • MD5

      0ff2332684f222fe1466d80265428d8d

    • SHA1

      b31e87e4eb24a96aa799ff8d31b4482cc2c1cf09

    • SHA256

      478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69

    • SHA512

      d5350fc0f29de60208afedc298bf12201655c8f31e821d6ea2c4f4e8e1c23ed6a2b61ad4c0b8885e3c626292a8a6459d3e6038e3f7171653ac32f7077d9a11f6

    • SSDEEP

      1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSpO4AmCL3i9YYY8/x:5JjcF8KfCOcjk+guPVjSpXd19Y7m

    Score
    8/10
    persistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks