Overview

overview

10

Static

static

8

c913c6b385...fc.exe

windows7-x64

10

c913c6b385...fc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c913c6b385e462a633721d38ec1fbe065656fbfedfcdfc7999120534d6b03dfc

  • Size

    46KB

  • Sample

    221123-tejjasgh6x

  • MD5

    5354d80d4a823b570c8c6478cc9b8147

  • SHA1

    ce1fbb6a725d3201c48224241c03f26d1ff98a84

  • SHA256

    c913c6b385e462a633721d38ec1fbe065656fbfedfcdfc7999120534d6b03dfc

  • SHA512

    e380f218dcd26c70268d6acf020f371301bdf1f257c6e5c589715af197f3eab005e3fdd083dee3e2be3549d82d1b234ed41d048bcdaff343b7b8aa2262a4be18

  • SSDEEP

    768:pBRQek1xOQKW9xsimoZ1VGjg4xz+3a87UHloVdd+SUyr2wwI/DJrNFq:pTQpc3SsPoZ1eFSaMlt+ZMJJs

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      c913c6b385e462a633721d38ec1fbe065656fbfedfcdfc7999120534d6b03dfc

    • Size

      46KB

    • MD5

      5354d80d4a823b570c8c6478cc9b8147

    • SHA1

      ce1fbb6a725d3201c48224241c03f26d1ff98a84

    • SHA256

      c913c6b385e462a633721d38ec1fbe065656fbfedfcdfc7999120534d6b03dfc

    • SHA512

      e380f218dcd26c70268d6acf020f371301bdf1f257c6e5c589715af197f3eab005e3fdd083dee3e2be3549d82d1b234ed41d048bcdaff343b7b8aa2262a4be18

    • SSDEEP

      768:pBRQek1xOQKW9xsimoZ1VGjg4xz+3a87UHloVdd+SUyr2wwI/DJrNFq:pTQpc3SsPoZ1eFSaMlt+ZMJJs

    Score
    10/10
    evasionpersistenceupx

    • Modifies firewall policy service

      evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables use of System Restore points

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks