Overview

overview

10

Static

static

9

ea5cc47487...fb.dll

windows7-x64

10

ea5cc47487...fb.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea5cc474874b163f98bc9b04a5bb7b6aeb2b5bfbdb58189ab305ff4b76e44afb

  • Size

    134KB

  • Sample

    221123-1crv8aaa31

  • MD5

    25be0557ff7085c2696024c14dc703a2

  • SHA1

    71af85d6e0a8dc897697b3f713139a984fa9503a

  • SHA256

    ea5cc474874b163f98bc9b04a5bb7b6aeb2b5bfbdb58189ab305ff4b76e44afb

  • SHA512

    44f179e9d4a8759fde0ca13e9922c8841e794ec66506fe0e6e8cc34cf97c304efc8c2032cb3fd39a0a1b9c75bd2fa72c54a04885d7d5dacc7c16dc73a7675934

  • SSDEEP

    3072:WxWdc5+VuZdcEKFNsM//wq3BG1LIulzGbMtebi8wHz:WvEuZdk0Mn7mUuBuMT

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      ea5cc474874b163f98bc9b04a5bb7b6aeb2b5bfbdb58189ab305ff4b76e44afb

    • Size

      134KB

    • MD5

      25be0557ff7085c2696024c14dc703a2

    • SHA1

      71af85d6e0a8dc897697b3f713139a984fa9503a

    • SHA256

      ea5cc474874b163f98bc9b04a5bb7b6aeb2b5bfbdb58189ab305ff4b76e44afb

    • SHA512

      44f179e9d4a8759fde0ca13e9922c8841e794ec66506fe0e6e8cc34cf97c304efc8c2032cb3fd39a0a1b9c75bd2fa72c54a04885d7d5dacc7c16dc73a7675934

    • SSDEEP

      3072:WxWdc5+VuZdcEKFNsM//wq3BG1LIulzGbMtebi8wHz:WvEuZdk0Mn7mUuBuMT

    Score
    10/10
    evasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

2
T1158

Privilege Escalation

Defense Evasion

Hidden Files and Directories

2
T1158

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks