Overview

overview

10

Static

static

8

28b215e600...38.exe

windows7-x64

10

28b215e600...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    28b215e60040ecd53a5bc5a25beea06f35a3d7075398a541df60f030dc694038

  • Size

    456KB

  • Sample

    221123-1gzfvsac9y

  • MD5

    f610a11bf36467ce1b02bf22707eb6e3

  • SHA1

    d0c4830307a2bd8cca102d2b3852231203c98400

  • SHA256

    28b215e60040ecd53a5bc5a25beea06f35a3d7075398a541df60f030dc694038

  • SHA512

    44bb1ee4e16bf60e441e450127fe1e5d1263fd2ae92b0f695bf5ebaa5e468e2afe8d7ecd4ed2b410e837484bc661962e68e94cc71f8b3a9ba8b1661f9ceb4fd7

  • SSDEEP

    6144:5uHOOnmy+g4g/UOPSe570Szp3/uHOJnmy+g4g/UOPSe570Szp3C:gOOUOB0fOJUOB0f

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      28b215e60040ecd53a5bc5a25beea06f35a3d7075398a541df60f030dc694038

    • Size

      456KB

    • MD5

      f610a11bf36467ce1b02bf22707eb6e3

    • SHA1

      d0c4830307a2bd8cca102d2b3852231203c98400

    • SHA256

      28b215e60040ecd53a5bc5a25beea06f35a3d7075398a541df60f030dc694038

    • SHA512

      44bb1ee4e16bf60e441e450127fe1e5d1263fd2ae92b0f695bf5ebaa5e468e2afe8d7ecd4ed2b410e837484bc661962e68e94cc71f8b3a9ba8b1661f9ceb4fd7

    • SSDEEP

      6144:5uHOOnmy+g4g/UOPSe570Szp3/uHOJnmy+g4g/UOPSe570Szp3C:gOOUOB0fOJUOB0f

    Score
    10/10
    evasionpersistenceupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks