Overview

overview

8

Static

static

63294aab3f...c1.exe

windows7-x64

8

63294aab3f...c1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63294aab3f0645fdc488074e43819182d8b621c3c4bfd24f999d2aa5e30c3cc1

  • Size

    334KB

  • Sample

    221125-jms3lafd4z

  • MD5

    3f629c5b958845119f21931da1473c6c

  • SHA1

    cdce405920e99699740d89599b9ec7f40e9c806f

  • SHA256

    63294aab3f0645fdc488074e43819182d8b621c3c4bfd24f999d2aa5e30c3cc1

  • SHA512

    85192ff9caa98eaf706537a6ece20b7da994423afdf59c12ce70fd5cfc4150bf4d8517851f274956c24ab660c732aa13da64e58d9acddcf954853855f722a528

  • SSDEEP

    6144:92C4B23wyiZ9/G65p/lPeKzXoXsHqjJtrxCW4zfwAHeLQJk8UTEmrKo:sCEyiX/G65JZkXsHWtIpzd+LikrKo

Score
8/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      63294aab3f0645fdc488074e43819182d8b621c3c4bfd24f999d2aa5e30c3cc1

    • Size

      334KB

    • MD5

      3f629c5b958845119f21931da1473c6c

    • SHA1

      cdce405920e99699740d89599b9ec7f40e9c806f

    • SHA256

      63294aab3f0645fdc488074e43819182d8b621c3c4bfd24f999d2aa5e30c3cc1

    • SHA512

      85192ff9caa98eaf706537a6ece20b7da994423afdf59c12ce70fd5cfc4150bf4d8517851f274956c24ab660c732aa13da64e58d9acddcf954853855f722a528

    • SSDEEP

      6144:92C4B23wyiZ9/G65p/lPeKzXoXsHqjJtrxCW4zfwAHeLQJk8UTEmrKo:sCEyiX/G65JZkXsHWtIpzd+LikrKo

    Score
    8/10
    evasionpersistenceupx

    • Disables Task Manager via registry modification

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks