Overview

overview

10

Static

static

9

c1c00f952a...2c.dll

windows7-x64

10

c1c00f952a...2c.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c1c00f952a38acd5c947b83444fbe0459ab80421c829460557b4a77f9e64a82c

  • Size

    147KB

  • Sample

    221123-1c4j1saa5y

  • MD5

    5310b8783635d880c578d7e0a2479322

  • SHA1

    2f5b786dc51e259cc73837670194d181095517cf

  • SHA256

    c1c00f952a38acd5c947b83444fbe0459ab80421c829460557b4a77f9e64a82c

  • SHA512

    8639d7f01bc9a9e59fd8338c606355fab7398e9312fee3f64edd50f211345806896bf0a9916ce5091b4c720e305d205aa0bb217442774e769e2db5dc05aad073

  • SSDEEP

    3072:vklksnOXrQkaS2Zbne9dzL4AJUzEn34lJmkxt3xQmtgNFL4f:vyKQkaSkre9hLgIngJmE3LKFO

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      c1c00f952a38acd5c947b83444fbe0459ab80421c829460557b4a77f9e64a82c

    • Size

      147KB

    • MD5

      5310b8783635d880c578d7e0a2479322

    • SHA1

      2f5b786dc51e259cc73837670194d181095517cf

    • SHA256

      c1c00f952a38acd5c947b83444fbe0459ab80421c829460557b4a77f9e64a82c

    • SHA512

      8639d7f01bc9a9e59fd8338c606355fab7398e9312fee3f64edd50f211345806896bf0a9916ce5091b4c720e305d205aa0bb217442774e769e2db5dc05aad073

    • SSDEEP

      3072:vklksnOXrQkaS2Zbne9dzL4AJUzEn34lJmkxt3xQmtgNFL4f:vyKQkaSkre9hLgIngJmE3LKFO

    Score
    10/10
    evasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

2
T1158

Privilege Escalation

Defense Evasion

Hidden Files and Directories

2
T1158

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks