c5b8d85af54227c2b10c4630af6422a84475f57fe8e2fecef9adea8c695ce194 | Triage

Submit
Reports

Overview

overview

Static

static

9

c5b8d85af5...94.dll

windows7-x64

c5b8d85af5...94.dll

windows10-2004-x64

Sharing

General

Target

c5b8d85af54227c2b10c4630af6422a84475f57fe8e2fecef9adea8c695ce194
Size

125KB
Sample

221123-1c3ygsaa5x
MD5

25c6734ae974ac2de1a0293700e47d38
SHA1

4caf3837d47c399c45b1489d764ceda0695813c6
SHA256

c5b8d85af54227c2b10c4630af6422a84475f57fe8e2fecef9adea8c695ce194
SHA512

1fb89916c3f111c60f61ffd725869d1c8ae9676d5329e680e9f67a27539ec65529dc08a8e7f38fbcebf8f62622429309009f0a2e84d8852fa17e257d05fca38e
SSDEEP

1536:Jaj2M9JntRCaH1Soe7s6XTkUxia8yRIF95GPHiz4Xa7TFmAEjo54FKMrKm28aDHw:jMbCs1xgswFITQPHPXiYM4YMGFrzwz9Z

Score

10^/10

evasion upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

c5b8d85af54227c2b10c4630af6422a84475f57fe8e2fecef9adea8c695ce194.dll

Resource

win7-20221111-en

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

c5b8d85af54227c2b10c4630af6422a84475f57fe8e2fecef9adea8c695ce194.dll

Resource

win10v2004-20220812-en

windows10-2004-x64

14 signatures

150 seconds

Malware Config

Targets

- Target
  
  c5b8d85af54227c2b10c4630af6422a84475f57fe8e2fecef9adea8c695ce194
- Size
  
  125KB
- MD5
  
  25c6734ae974ac2de1a0293700e47d38
- SHA1
  
  4caf3837d47c399c45b1489d764ceda0695813c6
- SHA256
  
  c5b8d85af54227c2b10c4630af6422a84475f57fe8e2fecef9adea8c695ce194
- SHA512
  
  1fb89916c3f111c60f61ffd725869d1c8ae9676d5329e680e9f67a27539ec65529dc08a8e7f38fbcebf8f62622429309009f0a2e84d8852fa17e257d05fca38e
- SSDEEP
  
  1536:Jaj2M9JntRCaH1Soe7s6XTkUxia8yRIF95GPHiz4Xa7TFmAEjo54FKMrKm28aDHw:jMbCs1xgswFITQPHPXiYM4YMGFrzwz9Z
Score

10^/10

evasion upx
- Modifies visibility of file extensions in Explorer
  evasion
- Modifies visiblity of hidden/system files in Explorer
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2024

Terms | Privacy