Overview

overview

9

Static

static

1

cb46821493...3e.exe

windows7-x64

9

cb46821493...3e.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb46821493bc0bed7f48ff7d5d3c3c5f044e546706fd73dc6a504234e90ad83e

  • Size

    8.6MB

  • Sample

    221123-lkqwkafa8t

  • MD5

    015ea6d8142ce02789927eb2d69d14f9

  • SHA1

    bf3e29183659426b1d539d7639c874a6d7323e0b

  • SHA256

    cb46821493bc0bed7f48ff7d5d3c3c5f044e546706fd73dc6a504234e90ad83e

  • SHA512

    7cf1c7c30766b7c31a4e1668f0b0e77e34f66834fb40466662fe36fbd3b50d47dee41ae23d7510108209bf39fa7e52bc4dae1d0a12fb271fffa8412b0e4eacd3

  • SSDEEP

    196608:XKx0aXrMnn0qMPHpvExwdatd0j/dWO6hKbGUFIzR9vO64yOs:ax0aXrMnLM/pvwwa0j/dWoj2DvxO

Score
9/10
evasionupx

Malware Config

Targets

    • Target

      cb46821493bc0bed7f48ff7d5d3c3c5f044e546706fd73dc6a504234e90ad83e

    • Size

      8.6MB

    • MD5

      015ea6d8142ce02789927eb2d69d14f9

    • SHA1

      bf3e29183659426b1d539d7639c874a6d7323e0b

    • SHA256

      cb46821493bc0bed7f48ff7d5d3c3c5f044e546706fd73dc6a504234e90ad83e

    • SHA512

      7cf1c7c30766b7c31a4e1668f0b0e77e34f66834fb40466662fe36fbd3b50d47dee41ae23d7510108209bf39fa7e52bc4dae1d0a12fb271fffa8412b0e4eacd3

    • SSDEEP

      196608:XKx0aXrMnn0qMPHpvExwdatd0j/dWO6hKbGUFIzR9vO64yOs:ax0aXrMnLM/pvwwa0j/dWoj2DvxO

    Score
    9/10
    evasionupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks