Overview

overview

9

Static

static

1

7fb9f7dcba...08.exe

windows7-x64

9

7fb9f7dcba...08.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7fb9f7dcbad1de318e884689f1b2f125f589824ffe1af89422d836461e0e7e08

  • Size

    9.1MB

  • Sample

    221123-lldmmabf59

  • MD5

    a2c6f6e0771f08fdb3ed105dd7aca7ce

  • SHA1

    f8a5cc0ee822b8efaa238bf0a771e302163baddb

  • SHA256

    7fb9f7dcbad1de318e884689f1b2f125f589824ffe1af89422d836461e0e7e08

  • SHA512

    4170ac11a4e013014e1694fc1448003f54ff3145c87117eaec45545ebd0a6e759ed0bd2c8d130d65285685998fc52bc211d71b387808506ed9ae3ad4f6eb200f

  • SSDEEP

    196608:N3Go9+hicswFF9phloc70/FzZQK2uIsIY/bLtD6Yk01jzNLPski:N7MswFF7oc70/pxEDebL0jWzNLPsf

Score
9/10
evasionupx

Malware Config

Targets

    • Target

      7fb9f7dcbad1de318e884689f1b2f125f589824ffe1af89422d836461e0e7e08

    • Size

      9.1MB

    • MD5

      a2c6f6e0771f08fdb3ed105dd7aca7ce

    • SHA1

      f8a5cc0ee822b8efaa238bf0a771e302163baddb

    • SHA256

      7fb9f7dcbad1de318e884689f1b2f125f589824ffe1af89422d836461e0e7e08

    • SHA512

      4170ac11a4e013014e1694fc1448003f54ff3145c87117eaec45545ebd0a6e759ed0bd2c8d130d65285685998fc52bc211d71b387808506ed9ae3ad4f6eb200f

    • SSDEEP

      196608:N3Go9+hicswFF9phloc70/FzZQK2uIsIY/bLtD6Yk01jzNLPski:N7MswFF7oc70/pxEDebL0jWzNLPsf

    Score
    9/10
    evasionupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks