Overview

overview

8

Static

static

e85927ba1f...77.exe

windows7-x64

8

e85927ba1f...77.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    e85927ba1fbf0b02f1357a785a45cefc3c0951481ac21236b9c9eafc6f494577

  • Size

    611KB

  • Sample

    221107-lq7fhaacb9

  • MD5

    0f65683112b29dddd7d8a77e81263659

  • SHA1

    ab4a271627ec25de0588f2e15baeed58e2135e2a

  • SHA256

    e85927ba1fbf0b02f1357a785a45cefc3c0951481ac21236b9c9eafc6f494577

  • SHA512

    450b65170d700d346296c6986481dc32e7a28a2b8de445d55d8c6bf4876f84d615ea61dc84c1348f7b74950ea5b476500f5efb841426ef022db4a61f92fab02b

  • SSDEEP

    12288:95FWFWjCueWOPDbdvGm+hZRW+ibXG3mXAA4EG4yiCLT1:ZNeWqvf+vIbwmXJCl

Score
8/10
discoveryevasionpersistencetrojanupx

Malware Config

Targets

    • Target

      e85927ba1fbf0b02f1357a785a45cefc3c0951481ac21236b9c9eafc6f494577

    • Size

      611KB

    • MD5

      0f65683112b29dddd7d8a77e81263659

    • SHA1

      ab4a271627ec25de0588f2e15baeed58e2135e2a

    • SHA256

      e85927ba1fbf0b02f1357a785a45cefc3c0951481ac21236b9c9eafc6f494577

    • SHA512

      450b65170d700d346296c6986481dc32e7a28a2b8de445d55d8c6bf4876f84d615ea61dc84c1348f7b74950ea5b476500f5efb841426ef022db4a61f92fab02b

    • SSDEEP

      12288:95FWFWjCueWOPDbdvGm+hZRW+ibXG3mXAA4EG4yiCLT1:ZNeWqvf+vIbwmXJCl

    Score
    8/10
    discoveryevasionpersistencetrojanupx

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Deletes itself

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks