Overview

overview

10

Static

static

8

1e4c85583b...d7.exe

windows7-x64

8

1e4c85583b...d7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1e4c85583b06b86d5518b7d0eaa97f8c30e41b3f137b32725ac56e0485b266d7

  • Size

    496KB

  • Sample

    221121-nbpm9abf9w

  • MD5

    4585c495b07f2eebcf9d6c9db8f795c0

  • SHA1

    a6499f290e53edac45183593f366b7488c3dc670

  • SHA256

    1e4c85583b06b86d5518b7d0eaa97f8c30e41b3f137b32725ac56e0485b266d7

  • SHA512

    dd2ab373532071e574fc74d1cc15928fabdfd7378194fdd2e69e564fe540953bbaee39b323680e9baca3cba09aba32b0f627c3a441f88c0917294bafd4ce4999

  • SSDEEP

    6144:f57GN1ij/XjhP8sjfmH9q8id0cAXSSZd3fO1YZYX3Y/sv1Zau0TG2QBg+sKYP9G7:f572+XSHI0xbdyC0FvWHR9+zYPEghEWQ

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      1e4c85583b06b86d5518b7d0eaa97f8c30e41b3f137b32725ac56e0485b266d7

    • Size

      496KB

    • MD5

      4585c495b07f2eebcf9d6c9db8f795c0

    • SHA1

      a6499f290e53edac45183593f366b7488c3dc670

    • SHA256

      1e4c85583b06b86d5518b7d0eaa97f8c30e41b3f137b32725ac56e0485b266d7

    • SHA512

      dd2ab373532071e574fc74d1cc15928fabdfd7378194fdd2e69e564fe540953bbaee39b323680e9baca3cba09aba32b0f627c3a441f88c0917294bafd4ce4999

    • SSDEEP

      6144:f57GN1ij/XjhP8sjfmH9q8id0cAXSSZd3fO1YZYX3Y/sv1Zau0TG2QBg+sKYP9G7:f572+XSHI0xbdyC0FvWHR9+zYPEghEWQ

    Score
    10/10
    upxevasion

    • Modifies firewall policy service

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks