Overview

overview

8

Static

static

bbc4ba600b...33.exe

windows7-x64

8

bbc4ba600b...33.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bbc4ba600bec97977bd31eb7e1e197c22eeb29266c37f536e6a40e3d4a1ac633

  • Size

    2.8MB

  • Sample

    221123-xtc7lsfh92

  • MD5

    a2c9ee7419369ada4d8a41ef14d642a4

  • SHA1

    bbeee886e192b807097c22bbaf79483659242d11

  • SHA256

    bbc4ba600bec97977bd31eb7e1e197c22eeb29266c37f536e6a40e3d4a1ac633

  • SHA512

    0f14717a83583b92ec472c7557cd1d81a95bc66507089aa0cfc785e575a11406aae172f3c95dec61426cbe6848f8a4e4a3e99b9183f351c6bbd5379657a337e1

  • SSDEEP

    49152:etQ81S566MD++BLuh7BFQEuQsk9RxsmHpAJr/EnPUk151Fy7b3mAn0JxRvyGoU+T:etQ81ZpD++Buh7L/rxxHpAJCNZYH26x3

Score
8/10
evasionupx

Malware Config

Targets

    • Target

      bbc4ba600bec97977bd31eb7e1e197c22eeb29266c37f536e6a40e3d4a1ac633

    • Size

      2.8MB

    • MD5

      a2c9ee7419369ada4d8a41ef14d642a4

    • SHA1

      bbeee886e192b807097c22bbaf79483659242d11

    • SHA256

      bbc4ba600bec97977bd31eb7e1e197c22eeb29266c37f536e6a40e3d4a1ac633

    • SHA512

      0f14717a83583b92ec472c7557cd1d81a95bc66507089aa0cfc785e575a11406aae172f3c95dec61426cbe6848f8a4e4a3e99b9183f351c6bbd5379657a337e1

    • SSDEEP

      49152:etQ81S566MD++BLuh7BFQEuQsk9RxsmHpAJr/EnPUk151Fy7b3mAn0JxRvyGoU+T:etQ81ZpD++Buh7L/rxxHpAJCNZYH26x3

    Score
    8/10
    evasionupx

    • Disables RegEdit via registry modification

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks