Overview

overview

8

Static

static

8

05c3d9e329...f9.exe

windows7-x64

8

05c3d9e329...f9.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05c3d9e3294dec9348ed4d6b0f1c1b0c8bc95520d55e0c1e3c56c780470c66f9

  • Size

    936KB

  • Sample

    221123-lp6sksbh93

  • MD5

    56da937f9def50b05b6cc712c0f5c34b

  • SHA1

    5b2338345e3e2181fbb07f803444598dccf14826

  • SHA256

    05c3d9e3294dec9348ed4d6b0f1c1b0c8bc95520d55e0c1e3c56c780470c66f9

  • SHA512

    1250a38d04b8e621455c374b3790fbaae6a777ea21a909e7a8b04d20a1c6897e9e4f753d89c5a0389e1513d500627dc7dcc64661dd80add46a11e9079bd0a014

  • SSDEEP

    24576:ithEVaPqLE8HjAHdAHgXrpHfaRo8nj49hS0X:6EVUcpHUHdT

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      05c3d9e3294dec9348ed4d6b0f1c1b0c8bc95520d55e0c1e3c56c780470c66f9

    • Size

      936KB

    • MD5

      56da937f9def50b05b6cc712c0f5c34b

    • SHA1

      5b2338345e3e2181fbb07f803444598dccf14826

    • SHA256

      05c3d9e3294dec9348ed4d6b0f1c1b0c8bc95520d55e0c1e3c56c780470c66f9

    • SHA512

      1250a38d04b8e621455c374b3790fbaae6a777ea21a909e7a8b04d20a1c6897e9e4f753d89c5a0389e1513d500627dc7dcc64661dd80add46a11e9079bd0a014

    • SSDEEP

      24576:ithEVaPqLE8HjAHdAHgXrpHfaRo8nj49hS0X:6EVUcpHUHdT

    Score
    8/10
    upxpersistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks