Overview

overview

10

Static

static

8

d3a71099b6...f7.dll

windows7-x64

10

d3a71099b6...f7.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3a71099b6d0b86fb3e477d089273c2867c3ce02094077103218a1d1db55a2f7

  • Size

    105KB

  • Sample

    221123-1cw5yaaa4x

  • MD5

    3643a3eca3c593449f6b3e1afa409b0c

  • SHA1

    0a9c611d55826f162c9345a7613d39dd827ec093

  • SHA256

    d3a71099b6d0b86fb3e477d089273c2867c3ce02094077103218a1d1db55a2f7

  • SHA512

    ab0c6bb6b42afe53a8187982e839d8a42b94bc61d290b00eeacfa60e704b1c28d627ad3b0c6cf7f8fa0977e02a5621b87caa4951eccbec915b342e07659011d5

  • SSDEEP

    1536:u3oHD1O240XJ85tDJFYjJvuzXd8AVJbaWq6dxSwUty7mQMLsfW1Vh3i1HVS7Fc6p:u3SB4KJ8bDJFygTd8I22bUty77P7dG7

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      d3a71099b6d0b86fb3e477d089273c2867c3ce02094077103218a1d1db55a2f7

    • Size

      105KB

    • MD5

      3643a3eca3c593449f6b3e1afa409b0c

    • SHA1

      0a9c611d55826f162c9345a7613d39dd827ec093

    • SHA256

      d3a71099b6d0b86fb3e477d089273c2867c3ce02094077103218a1d1db55a2f7

    • SHA512

      ab0c6bb6b42afe53a8187982e839d8a42b94bc61d290b00eeacfa60e704b1c28d627ad3b0c6cf7f8fa0977e02a5621b87caa4951eccbec915b342e07659011d5

    • SSDEEP

      1536:u3oHD1O240XJ85tDJFYjJvuzXd8AVJbaWq6dxSwUty7mQMLsfW1Vh3i1HVS7Fc6p:u3SB4KJ8bDJFygTd8I22bUty77P7dG7

    Score
    10/10
    evasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

2
T1158

Privilege Escalation

Defense Evasion

Hidden Files and Directories

2
T1158

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks