Overview

overview

8

Static

static

8

57606936ff...ef.exe

windows7-x64

8

57606936ff...ef.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    57606936ffe69809bb6a897a55a4fd8489c7e39630db1be24d686a3ccc37a9ef

  • Size

    13KB

  • Sample

    221107-p756jsgfb7

  • MD5

    057d1c294370d0131f6aa433a5d95556

  • SHA1

    ad60e3f6f535c153f758e381270209ef8357e25f

  • SHA256

    57606936ffe69809bb6a897a55a4fd8489c7e39630db1be24d686a3ccc37a9ef

  • SHA512

    4bee8ac538c6b3a29b20ffe9ebe78e6ffcc31ca20ce8ce2d007d0a2eb38d90d4a31a36131636a9a3ac93d1c53f23d79856c87d0936dda6c8e0f0b6d279897610

  • SSDEEP

    384:mXOJ8NjyTtL9BSScJTvkBNlcNe3jWelKdF:mXDjAtL3qJb+bcszJKd

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      57606936ffe69809bb6a897a55a4fd8489c7e39630db1be24d686a3ccc37a9ef

    • Size

      13KB

    • MD5

      057d1c294370d0131f6aa433a5d95556

    • SHA1

      ad60e3f6f535c153f758e381270209ef8357e25f

    • SHA256

      57606936ffe69809bb6a897a55a4fd8489c7e39630db1be24d686a3ccc37a9ef

    • SHA512

      4bee8ac538c6b3a29b20ffe9ebe78e6ffcc31ca20ce8ce2d007d0a2eb38d90d4a31a36131636a9a3ac93d1c53f23d79856c87d0936dda6c8e0f0b6d279897610

    • SSDEEP

      384:mXOJ8NjyTtL9BSScJTvkBNlcNe3jWelKdF:mXDjAtL3qJb+bcszJKd

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • Modifies AppInit DLL entries

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks