Overview

overview

8

Static

static

8

289d498002...d5.exe

windows7-x64

8

289d498002...d5.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    289d498002a003023530d518ce42c80a78e66ed96b979639c5b777753fcdced5

  • Size

    84KB

  • Sample

    221121-n1z6aacg8x

  • MD5

    168a504035042697c728985b0cd6ff20

  • SHA1

    c7ac3f88fd03cced9b92912c9bbb95e4adfb67e7

  • SHA256

    289d498002a003023530d518ce42c80a78e66ed96b979639c5b777753fcdced5

  • SHA512

    8192aae674041086ed046140178d7c2e5e595a0d10709bd3ba0509226b518adb1c0872f05a86fb1662645a185bd34a2add6e96c7eef85b27b0b65e7c7a7c148c

  • SSDEEP

    1536:MHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVt/2YRmA7hGRIULTUaDdUoUaV:MHoLde/OgV432UcP39hXJZn/UEjU9DCy

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      289d498002a003023530d518ce42c80a78e66ed96b979639c5b777753fcdced5

    • Size

      84KB

    • MD5

      168a504035042697c728985b0cd6ff20

    • SHA1

      c7ac3f88fd03cced9b92912c9bbb95e4adfb67e7

    • SHA256

      289d498002a003023530d518ce42c80a78e66ed96b979639c5b777753fcdced5

    • SHA512

      8192aae674041086ed046140178d7c2e5e595a0d10709bd3ba0509226b518adb1c0872f05a86fb1662645a185bd34a2add6e96c7eef85b27b0b65e7c7a7c148c

    • SSDEEP

      1536:MHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVt/2YRmA7hGRIULTUaDdUoUaV:MHoLde/OgV432UcP39hXJZn/UEjU9DCy

    Score
    8/10
    persistenceupx

    • Modifies AppInit DLL entries

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks