dfe7f2e02daaaab3f28d4d1155ed5d126bc02d50a7a98052f360c0fb41e22a56 | Triage

Submit
Reports

Overview

overview

Static

static

9

dfe7f2e02d...56.dll

windows7-x64

dfe7f2e02d...56.dll

windows10-2004-x64

Sharing

General

Target

dfe7f2e02daaaab3f28d4d1155ed5d126bc02d50a7a98052f360c0fb41e22a56
Size

167KB
Sample

221123-1cs4aaaa4s
MD5

1512adf3582c205ef6702501cb046a02
SHA1

e8134809c11cbd7db0e9eafa1ce1c4ffc4131e78
SHA256

dfe7f2e02daaaab3f28d4d1155ed5d126bc02d50a7a98052f360c0fb41e22a56
SHA512

eeddc29b70d70a8926c38f56bebfdbf2ac3c3e98b23557d5c73c110686bee2a9496a1030f7fa6b0443cce298f28c71511a7bd6a85cb1f9900651ce402d0f0892
SSDEEP

3072:YTleUJFD7UNGyjFAxUgCGWk7puc6TKkKpzdQpah72Tf1K7cVMIRs+iKAyFuefvTI:YRBJFUsEFAxUghWk70ZWkKpzdZt2Tf5w

Score

10^/10

evasion upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

dfe7f2e02daaaab3f28d4d1155ed5d126bc02d50a7a98052f360c0fb41e22a56.dll

Resource

win7-20221111-en

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

dfe7f2e02daaaab3f28d4d1155ed5d126bc02d50a7a98052f360c0fb41e22a56.dll

Resource

win10v2004-20220812-en

windows10-2004-x64

14 signatures

150 seconds

Malware Config

Targets

- Target
  
  dfe7f2e02daaaab3f28d4d1155ed5d126bc02d50a7a98052f360c0fb41e22a56
- Size
  
  167KB
- MD5
  
  1512adf3582c205ef6702501cb046a02
- SHA1
  
  e8134809c11cbd7db0e9eafa1ce1c4ffc4131e78
- SHA256
  
  dfe7f2e02daaaab3f28d4d1155ed5d126bc02d50a7a98052f360c0fb41e22a56
- SHA512
  
  eeddc29b70d70a8926c38f56bebfdbf2ac3c3e98b23557d5c73c110686bee2a9496a1030f7fa6b0443cce298f28c71511a7bd6a85cb1f9900651ce402d0f0892
- SSDEEP
  
  3072:YTleUJFD7UNGyjFAxUgCGWk7puc6TKkKpzdQpah72Tf1K7cVMIRs+iKAyFuefvTI:YRBJFUsEFAxUghWk70ZWkKpzdZt2Tf5w
Score

10^/10

evasion upx
- Modifies visibility of file extensions in Explorer
  evasion
- Modifies visiblity of hidden/system files in Explorer
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2024

Terms | Privacy