Overview

overview

10

Static

static

9

473805c864...9e.dll

windows7-x64

10

473805c864...9e.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    473805c864c854a20736818dc4bdf6fe34d1e7418d4405a9f0d9d21a00aeb29e

  • Size

    164KB

  • Sample

    221123-1dg3eaaa7y

  • MD5

    35aaf6d3566060ad385e92a55e97f685

  • SHA1

    cf21244f3d3b5d7166a66d90868ee802c8c5b017

  • SHA256

    473805c864c854a20736818dc4bdf6fe34d1e7418d4405a9f0d9d21a00aeb29e

  • SHA512

    664c7c84e6e5d3e47d5913056c8dbd5cbd0d7c1bb7ea05218ccc99a622509737f234d2cb46ef6510b75d47e361d9644a3774255f71fa90bf76e2b4dffd8e1dee

  • SSDEEP

    3072:ktORhCkTeLvh+9j2oE2oG8O+E8t4is0DTWM590E9YdXHZSgx:AORhCkf6qVHWTf0EGtXx

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      473805c864c854a20736818dc4bdf6fe34d1e7418d4405a9f0d9d21a00aeb29e

    • Size

      164KB

    • MD5

      35aaf6d3566060ad385e92a55e97f685

    • SHA1

      cf21244f3d3b5d7166a66d90868ee802c8c5b017

    • SHA256

      473805c864c854a20736818dc4bdf6fe34d1e7418d4405a9f0d9d21a00aeb29e

    • SHA512

      664c7c84e6e5d3e47d5913056c8dbd5cbd0d7c1bb7ea05218ccc99a622509737f234d2cb46ef6510b75d47e361d9644a3774255f71fa90bf76e2b4dffd8e1dee

    • SSDEEP

      3072:ktORhCkTeLvh+9j2oE2oG8O+E8t4is0DTWM590E9YdXHZSgx:AORhCkf6qVHWTf0EGtXx

    Score
    10/10
    evasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

2
T1158

Privilege Escalation

Defense Evasion

Hidden Files and Directories

2
T1158

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks