Overview

overview

8

Static

static

8

a57e0a272b...d8.exe

windows7-x64

8

a57e0a272b...d8.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a57e0a272b02ad7c646d5bd150bc09ef34e9abb9dc7fb5e0def67eeeb13fdad8

  • Size

    81KB

  • Sample

    221123-3m89csch23

  • MD5

    3881d82f85d7d39443986604130c6553

  • SHA1

    5a449339fa296469d56583c854d8c6b3105b7b4f

  • SHA256

    a57e0a272b02ad7c646d5bd150bc09ef34e9abb9dc7fb5e0def67eeeb13fdad8

  • SHA512

    503766e4912e6b0623bbffb270fb3506cdd8348c4cfb8274657ee8a37b881dae92eaca69759bc721c851774ee860a9da582726cfd5af404a4d0a6c46877890d6

  • SSDEEP

    1536:Rzgu4L/+dHjnCzGpFHbNNrytF4vec2kqsmdq4/oyH8dL23kt+kAxWzz:RsxD+dHein73mtWvMrs/4/5cZgjkAxWz

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      a57e0a272b02ad7c646d5bd150bc09ef34e9abb9dc7fb5e0def67eeeb13fdad8

    • Size

      81KB

    • MD5

      3881d82f85d7d39443986604130c6553

    • SHA1

      5a449339fa296469d56583c854d8c6b3105b7b4f

    • SHA256

      a57e0a272b02ad7c646d5bd150bc09ef34e9abb9dc7fb5e0def67eeeb13fdad8

    • SHA512

      503766e4912e6b0623bbffb270fb3506cdd8348c4cfb8274657ee8a37b881dae92eaca69759bc721c851774ee860a9da582726cfd5af404a4d0a6c46877890d6

    • SSDEEP

      1536:Rzgu4L/+dHjnCzGpFHbNNrytF4vec2kqsmdq4/oyH8dL23kt+kAxWzz:RsxD+dHein73mtWvMrs/4/5cZgjkAxWz

    Score
    8/10
    persistenceupx

    • Sets DLL path for service in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks