Overview

overview

9

Static

static

Ihre Onlin...AG.exe

windows7-x64

9

Ihre Onlin...AG.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18588f54de3c3c2787c0d17fe5aa8baf8700618a58ca8d707dee23fe461968c6

  • Size

    44KB

  • Sample

    221123-vnzsbace21

  • MD5

    30013ed3fac1e6729eff65c7882de7a6

  • SHA1

    d1d27ef861419b1b61ad5d9c070c181c538280bf

  • SHA256

    18588f54de3c3c2787c0d17fe5aa8baf8700618a58ca8d707dee23fe461968c6

  • SHA512

    ddc6b2f73224251b3377dc7746b7f88b09a273582e0e35e295afa8d24c1e5ce5eefc9f135f87decad480beeff706c897769c94c16084ce2e95bce4d96f82d7ca

  • SSDEEP

    768:cUQZEeKyhTMwNy33yN3En4kGey74ylZM0SP1WzUgbA+uzNSGF:cZhTMD3M+A97LM0IbgbWzQk

Score
9/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      Ihre Online Rechnung von Online Video Center AG.com

    • Size

      44KB

    • MD5

      c98bbd1f49ea275980e783d6169b3d61

    • SHA1

      8dadc0b071ddacfbe1b84ebe017e8e31d1086d1d

    • SHA256

      3087643db685b3b27dec0e59922aa5d3f937b69b6b0582add9b6529d04d75d0d

    • SHA512

      412b771201593dac227756b4f0d7d0a47d36cf4d789e763893b30be3b584644b0c9bdf7e760dfe76af4f2fdca2f7572c991dfcfa7ad9859f971654298de0e423

    • SSDEEP

      768:pUQZEeKyhTMwNy33yN3En4kGey74ylZM0SP1WzUgbA+uzNSG:pZhTMD3M+A97LM0IbgbWzQ

    Score
    9/10
    evasionpersistenceupx

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks