Overview

overview

8

Static

static

e77d93874f...e1.exe

windows7-x64

8

e77d93874f...e1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e77d93874ff714020022a49009d4b7fc7e5d5b17d362cb7ec9cf794902ca2ee1

  • Size

    752KB

  • Sample

    221125-hngkhshc77

  • MD5

    2db82147bb17ce650b32551b3ede29cc

  • SHA1

    54daaa1d1c08b5d8c1bbb4648e75b05cbe54e2c8

  • SHA256

    e77d93874ff714020022a49009d4b7fc7e5d5b17d362cb7ec9cf794902ca2ee1

  • SHA512

    48419612cc4dd39499c42707d91553c3273460f740e931627b5e1e8db534b625fdd8b70acef86fde72d5e4e2cc6d17a9241d026c5a015cda81e4e3c37039f04d

  • SSDEEP

    12288:LCbXZYRqMT9mqG3g4wZG3xnkUTnFK05KLdblX77eBO5YKT1fz7RR4pXIaNRB:2bXZwd5mq94wZktKxblX7715YU1pqd

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      e77d93874ff714020022a49009d4b7fc7e5d5b17d362cb7ec9cf794902ca2ee1

    • Size

      752KB

    • MD5

      2db82147bb17ce650b32551b3ede29cc

    • SHA1

      54daaa1d1c08b5d8c1bbb4648e75b05cbe54e2c8

    • SHA256

      e77d93874ff714020022a49009d4b7fc7e5d5b17d362cb7ec9cf794902ca2ee1

    • SHA512

      48419612cc4dd39499c42707d91553c3273460f740e931627b5e1e8db534b625fdd8b70acef86fde72d5e4e2cc6d17a9241d026c5a015cda81e4e3c37039f04d

    • SSDEEP

      12288:LCbXZYRqMT9mqG3g4wZG3xnkUTnFK05KLdblX77eBO5YKT1fz7RR4pXIaNRB:2bXZwd5mq94wZktKxblX7715YU1pqd

    Score
    8/10
    discoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks