Overview

overview

8

Static

static

8

5b5613d66a...22.exe

windows7-x64

8

5b5613d66a...22.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5b5613d66a59cee45ac39f9d90b6e222.exe.vir

  • Size

    13.6MB

  • Sample

    221122-mq85rsad87

  • MD5

    5b5613d66a59cee45ac39f9d90b6e222

  • SHA1

    0b6fc7c222daeb6f491dba9b0ed3131066eee499

  • SHA256

    62ead1c45297dc00de24b130bea0b75f0eeae5c7c0e7fd4429cdb22c907c2bd3

  • SHA512

    ffcbba181f987b407f04593cd3886edc503b537d6edc466fa939d05c1da1a655cc5dfc9f1965839db3f1ebdd446f8617a756dca4b56e01ae44407a3ed76ffc6e

  • SSDEEP

    393216:Ckhf2ZPa4PXn5m6L8LaEqPf9+obXgcv7XbItKCl:F12ZP9PX46LO9qt+kFbItBl

Score
8/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      5b5613d66a59cee45ac39f9d90b6e222.exe.vir

    • Size

      13.6MB

    • MD5

      5b5613d66a59cee45ac39f9d90b6e222

    • SHA1

      0b6fc7c222daeb6f491dba9b0ed3131066eee499

    • SHA256

      62ead1c45297dc00de24b130bea0b75f0eeae5c7c0e7fd4429cdb22c907c2bd3

    • SHA512

      ffcbba181f987b407f04593cd3886edc503b537d6edc466fa939d05c1da1a655cc5dfc9f1965839db3f1ebdd446f8617a756dca4b56e01ae44407a3ed76ffc6e

    • SSDEEP

      393216:Ckhf2ZPa4PXn5m6L8LaEqPf9+obXgcv7XbItKCl:F12ZP9PX46LO9qt+kFbItBl

    Score
    8/10
    discoveryevasionpersistenceupx

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks