Overview

overview

9

Static

static

1

4c406cdaf9...6e.exe

windows7-x64

9

4c406cdaf9...6e.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c406cdaf903d0c64cfdf5a7f6f8ac4ff2a5edab9d9a6faa6d9625d9b9f4066e

  • Size

    10.8MB

  • Sample

    221123-lmm8fsfb7v

  • MD5

    9742264b62aaaec012a7297a22813eb8

  • SHA1

    8d55be5c2c2a678db991c93445ee8284c1a83f8f

  • SHA256

    4c406cdaf903d0c64cfdf5a7f6f8ac4ff2a5edab9d9a6faa6d9625d9b9f4066e

  • SHA512

    439e19808f2f43e5d3cda297019782206853cf56bf37e5b836495c22a80a25641362c95e4d3a19ce0335d4a5ae2d6913ed7dca0d89424bca8fa4a872187f9054

  • SSDEEP

    196608:oFRGCXUS/QjwPIsiEf1kT841R1mz108usWgyr1o6CeLqBd9YAliRdz8nK351:ovfXUiSU0yELXum8Kgc1LlSlI

Score
9/10
evasionupx

Malware Config

Targets

    • Target

      4c406cdaf903d0c64cfdf5a7f6f8ac4ff2a5edab9d9a6faa6d9625d9b9f4066e

    • Size

      10.8MB

    • MD5

      9742264b62aaaec012a7297a22813eb8

    • SHA1

      8d55be5c2c2a678db991c93445ee8284c1a83f8f

    • SHA256

      4c406cdaf903d0c64cfdf5a7f6f8ac4ff2a5edab9d9a6faa6d9625d9b9f4066e

    • SHA512

      439e19808f2f43e5d3cda297019782206853cf56bf37e5b836495c22a80a25641362c95e4d3a19ce0335d4a5ae2d6913ed7dca0d89424bca8fa4a872187f9054

    • SSDEEP

      196608:oFRGCXUS/QjwPIsiEf1kT841R1mz108usWgyr1o6CeLqBd9YAliRdz8nK351:ovfXUiSU0yELXum8Kgc1LlSlI

    Score
    9/10
    evasionupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

1
T1518

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks