Overview

overview

8

Static

static

5

624cddba9b...fe.exe

windows7-x64

8

624cddba9b...fe.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    624cddba9b2013ac3c0562c1eef06cd91786a942f6599cd68e92837c130962fe

  • Size

    918KB

  • Sample

    221124-aetvgsec27

  • MD5

    4ab8f0a9f269be32769905207dc2c594

  • SHA1

    124357d9ba5455dc5c11b91868193542398b81c0

  • SHA256

    624cddba9b2013ac3c0562c1eef06cd91786a942f6599cd68e92837c130962fe

  • SHA512

    8530b637347082da16d0f25f5db3219df81b975a005610eaae11f04ce4c4553694052c910e674bf45be3b9e3b121cd01408b7e66eb91f5698664e67935e6a17d

  • SSDEEP

    12288:WhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4aXVMqzf2D+fT/hyOgFp:GRmJkcoQricOIQxiZY1iaXVvw+rEOgFp

Score
8/10
upx

Malware Config

Targets

    • Target

      624cddba9b2013ac3c0562c1eef06cd91786a942f6599cd68e92837c130962fe

    • Size

      918KB

    • MD5

      4ab8f0a9f269be32769905207dc2c594

    • SHA1

      124357d9ba5455dc5c11b91868193542398b81c0

    • SHA256

      624cddba9b2013ac3c0562c1eef06cd91786a942f6599cd68e92837c130962fe

    • SHA512

      8530b637347082da16d0f25f5db3219df81b975a005610eaae11f04ce4c4553694052c910e674bf45be3b9e3b121cd01408b7e66eb91f5698664e67935e6a17d

    • SSDEEP

      12288:WhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4aXVMqzf2D+fT/hyOgFp:GRmJkcoQricOIQxiZY1iaXVvw+rEOgFp

    Score
    8/10
    upx

    • Drops file in Drivers directory

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks