Overview

overview

10

Static

static

abf76f0184...af.exe

windows7-x64

10

abf76f0184...af.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    abf76f018477df502d20c18b01a42f7780f32a3bb12bb6820d90bef78558c1af

  • Size

    145KB

  • Sample

    221123-m9afjsgb63

  • MD5

    d9e0b4fc74b9b247145c425d37376cdc

  • SHA1

    95c1049fe15fa8550d7a4cee28e0121c516a7dce

  • SHA256

    abf76f018477df502d20c18b01a42f7780f32a3bb12bb6820d90bef78558c1af

  • SHA512

    c8314e989a532cd979d0f1994d274f5420dc69a1370282f07668d21be0c3745c877b45254be83ca4b4983a26f76d72da5228353c2f11ccfb1de9af6ede22b715

  • SSDEEP

    1536:p9SS9CRjbBeA5U668zy9DQRg8fssPh2b/UVJMcv287gv3maoYtH96qD4gu:PoZ8A5U668G9+DPYuvhVYlD4B

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      abf76f018477df502d20c18b01a42f7780f32a3bb12bb6820d90bef78558c1af

    • Size

      145KB

    • MD5

      d9e0b4fc74b9b247145c425d37376cdc

    • SHA1

      95c1049fe15fa8550d7a4cee28e0121c516a7dce

    • SHA256

      abf76f018477df502d20c18b01a42f7780f32a3bb12bb6820d90bef78558c1af

    • SHA512

      c8314e989a532cd979d0f1994d274f5420dc69a1370282f07668d21be0c3745c877b45254be83ca4b4983a26f76d72da5228353c2f11ccfb1de9af6ede22b715

    • SSDEEP

      1536:p9SS9CRjbBeA5U668zy9DQRg8fssPh2b/UVJMcv287gv3maoYtH96qD4gu:PoZ8A5U668G9+DPYuvhVYlD4B

    Score
    10/10
    evasionpersistenceupx

    • Modifies firewall policy service

      evasion

    • Drops file in Drivers directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks