Overview

overview

10

Static

static

8

dfd64ff09b...27.exe

windows7-x64

10

dfd64ff09b...27.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfd64ff09b4bf490214fcfced57f7929aff2a9d00fc3bbcb1ef5d18fd2890c27

  • Size

    1.1MB

  • Sample

    221123-1dr8daaa9s

  • MD5

    a5392fa44ff665c2b6ba42f667a7ae17

  • SHA1

    64facb8573421c6d31fb651eff49fb99e1404c93

  • SHA256

    dfd64ff09b4bf490214fcfced57f7929aff2a9d00fc3bbcb1ef5d18fd2890c27

  • SHA512

    0babf6e9c57c56c9689f5471cf820a5d81b834ffbf4e709567a78dddc4a943e8ac41ebd98d8a478c01eddc83c07de836f91bf2dbab4b5adf50d71c0b6f324656

  • SSDEEP

    12288:gO9u0YeZJys73dOvXDpNjNe8mGOZu0YeZJys73dOvXDpNjNe8mGOZu0YeZJys73W:ceZJ8NI8NeZJ8NI8NeZJ8NI81D3

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      dfd64ff09b4bf490214fcfced57f7929aff2a9d00fc3bbcb1ef5d18fd2890c27

    • Size

      1.1MB

    • MD5

      a5392fa44ff665c2b6ba42f667a7ae17

    • SHA1

      64facb8573421c6d31fb651eff49fb99e1404c93

    • SHA256

      dfd64ff09b4bf490214fcfced57f7929aff2a9d00fc3bbcb1ef5d18fd2890c27

    • SHA512

      0babf6e9c57c56c9689f5471cf820a5d81b834ffbf4e709567a78dddc4a943e8ac41ebd98d8a478c01eddc83c07de836f91bf2dbab4b5adf50d71c0b6f324656

    • SSDEEP

      12288:gO9u0YeZJys73dOvXDpNjNe8mGOZu0YeZJys73dOvXDpNjNe8mGOZu0YeZJys73W:ceZJ8NI8NeZJ8NI8NeZJ8NI81D3

    Score
    10/10
    evasionpersistenceupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks