Overview

overview

8

Static

static

e83fe35b09...e8.exe

windows7-x64

8

e83fe35b09...e8.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e83fe35b09b2f3a46183273e748b7d269e8e4f313cdb0cacbb9635be9cfb71e8

  • Size

    120KB

  • Sample

    221121-sadxksed84

  • MD5

    1348244c3cd2958b109129818a8c9896

  • SHA1

    ad0e92b25e795fb37568a47fbf5749e119c53220

  • SHA256

    e83fe35b09b2f3a46183273e748b7d269e8e4f313cdb0cacbb9635be9cfb71e8

  • SHA512

    658aa8b6be8be39bbfce335f93221ba5690bb3e2e726f823aaba8773cb3413ed4481fb777a9f7627c36ebc0fe003826840fc33b33dee99afc3b678c381f7216f

  • SSDEEP

    1536:QIDThSFWEv7NyArVF3qmRIjbPT6XpOPzmsLPtTh0PE:phSFWETNykFaygbipEzLLPRh0M

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      e83fe35b09b2f3a46183273e748b7d269e8e4f313cdb0cacbb9635be9cfb71e8

    • Size

      120KB

    • MD5

      1348244c3cd2958b109129818a8c9896

    • SHA1

      ad0e92b25e795fb37568a47fbf5749e119c53220

    • SHA256

      e83fe35b09b2f3a46183273e748b7d269e8e4f313cdb0cacbb9635be9cfb71e8

    • SHA512

      658aa8b6be8be39bbfce335f93221ba5690bb3e2e726f823aaba8773cb3413ed4481fb777a9f7627c36ebc0fe003826840fc33b33dee99afc3b678c381f7216f

    • SSDEEP

      1536:QIDThSFWEv7NyArVF3qmRIjbPT6XpOPzmsLPtTh0PE:phSFWETNykFaygbipEzLLPRh0M

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks