Overview

overview

9

Static

static

1

b75f0ea8f8...ac.exe

windows7-x64

9

b75f0ea8f8...ac.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b75f0ea8f8f358d5a4feddc0bfe530cdb0ffcf408526680b13b47dc58fe621ac

  • Size

    8.7MB

  • Sample

    221123-lmablabf99

  • MD5

    9a8ad7704e15020c3034eccad76fe80b

  • SHA1

    920e5d2a816ab6addbe24d0f1f0b6c451d6babbc

  • SHA256

    b75f0ea8f8f358d5a4feddc0bfe530cdb0ffcf408526680b13b47dc58fe621ac

  • SHA512

    83981231cf950c6784fc06be01e1aa3caccc8ad78f633b71ce9040df368269c24fd76ec9fbdd5d5bd1d4f78ecb844bf842bb6ddd1ab8f729756ff01cb2f118e2

  • SSDEEP

    196608:Fsxb/3xU5xE+EdOiyT9GutV+5FUmn7BfEU1efGKM3:M/BU5HEdpyUUMPAM

Score
9/10
evasionupx

Malware Config

Targets

    • Target

      b75f0ea8f8f358d5a4feddc0bfe530cdb0ffcf408526680b13b47dc58fe621ac

    • Size

      8.7MB

    • MD5

      9a8ad7704e15020c3034eccad76fe80b

    • SHA1

      920e5d2a816ab6addbe24d0f1f0b6c451d6babbc

    • SHA256

      b75f0ea8f8f358d5a4feddc0bfe530cdb0ffcf408526680b13b47dc58fe621ac

    • SHA512

      83981231cf950c6784fc06be01e1aa3caccc8ad78f633b71ce9040df368269c24fd76ec9fbdd5d5bd1d4f78ecb844bf842bb6ddd1ab8f729756ff01cb2f118e2

    • SSDEEP

      196608:Fsxb/3xU5xE+EdOiyT9GutV+5FUmn7BfEU1efGKM3:M/BU5HEdpyUUMPAM

    Score
    9/10
    evasionupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks