Overview

overview

8

Static

static

8

87438b9c03...ce.exe

windows7-x64

8

87438b9c03...ce.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    87438b9c03188b2a968bb059d36c888849d2ee1811384c42975ee068eb7df4ce

  • Size

    154KB

  • Sample

    221123-q2zl9aae5v

  • MD5

    9c7796ff737b2a894d41b2d17888b762

  • SHA1

    88fd00e03931ec0c6caceb15541ce77610472b8c

  • SHA256

    87438b9c03188b2a968bb059d36c888849d2ee1811384c42975ee068eb7df4ce

  • SHA512

    638526c820a2fb3555ccc479ea70f3b1cc6f9e1f92f03ccf5e8f9be8bed9e1d1148252634f550902af3e40b8f90c3ffc4ad16bbe90a9a853377c6f26494a79f6

  • SSDEEP

    3072:8YSxpPRGkYzL3PwIDJS7H29JWI3Wa3BaTAnaaPTZWout5S:8fRGkYHPwIwDg0rmB0zWFWoSw

Score
8/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      87438b9c03188b2a968bb059d36c888849d2ee1811384c42975ee068eb7df4ce

    • Size

      154KB

    • MD5

      9c7796ff737b2a894d41b2d17888b762

    • SHA1

      88fd00e03931ec0c6caceb15541ce77610472b8c

    • SHA256

      87438b9c03188b2a968bb059d36c888849d2ee1811384c42975ee068eb7df4ce

    • SHA512

      638526c820a2fb3555ccc479ea70f3b1cc6f9e1f92f03ccf5e8f9be8bed9e1d1148252634f550902af3e40b8f90c3ffc4ad16bbe90a9a853377c6f26494a79f6

    • SSDEEP

      3072:8YSxpPRGkYzL3PwIDJS7H29JWI3Wa3BaTAnaaPTZWout5S:8fRGkYHPwIwDg0rmB0zWFWoSw

    Score
    8/10
    evasionpersistenceupx

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks