d3a71099b6d0b86fb3e477d089273c2867c3ce02094077103218a1d1db55a2f7 | Triage

Submit
Reports

Overview

overview

Static

static

8

d3a71099b6...f7.dll

windows7-x64

d3a71099b6...f7.dll

windows10-2004-x64

Sharing

General

Target

d3a71099b6d0b86fb3e477d089273c2867c3ce02094077103218a1d1db55a2f7
Size

105KB
Sample

221123-1cw5yaaa4x
MD5

3643a3eca3c593449f6b3e1afa409b0c
SHA1

0a9c611d55826f162c9345a7613d39dd827ec093
SHA256

d3a71099b6d0b86fb3e477d089273c2867c3ce02094077103218a1d1db55a2f7
SHA512

ab0c6bb6b42afe53a8187982e839d8a42b94bc61d290b00eeacfa60e704b1c28d627ad3b0c6cf7f8fa0977e02a5621b87caa4951eccbec915b342e07659011d5
SSDEEP

1536:u3oHD1O240XJ85tDJFYjJvuzXd8AVJbaWq6dxSwUty7mQMLsfW1Vh3i1HVS7Fc6p:u3SB4KJ8bDJFygTd8I22bUty77P7dG7

Score

10^/10

evasion upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

d3a71099b6d0b86fb3e477d089273c2867c3ce02094077103218a1d1db55a2f7.dll

Resource

win7-20221111-en

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

d3a71099b6d0b86fb3e477d089273c2867c3ce02094077103218a1d1db55a2f7.dll

Resource

win10v2004-20221111-en

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  d3a71099b6d0b86fb3e477d089273c2867c3ce02094077103218a1d1db55a2f7
- Size
  
  105KB
- MD5
  
  3643a3eca3c593449f6b3e1afa409b0c
- SHA1
  
  0a9c611d55826f162c9345a7613d39dd827ec093
- SHA256
  
  d3a71099b6d0b86fb3e477d089273c2867c3ce02094077103218a1d1db55a2f7
- SHA512
  
  ab0c6bb6b42afe53a8187982e839d8a42b94bc61d290b00eeacfa60e704b1c28d627ad3b0c6cf7f8fa0977e02a5621b87caa4951eccbec915b342e07659011d5
- SSDEEP
  
  1536:u3oHD1O240XJ85tDJFYjJvuzXd8AVJbaWq6dxSwUty7mQMLsfW1Vh3i1HVS7Fc6p:u3SB4KJ8bDJFygTd8I22bUty77P7dG7
Score

10^/10

evasion upx
- Modifies visibility of file extensions in Explorer
  evasion
- Modifies visiblity of hidden/system files in Explorer
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2024

Terms | Privacy