Overview

overview

9

Static

static

28c5c2aa1e...f6.exe

windows7-x64

9

28c5c2aa1e...f6.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    28c5c2aa1ec6c8747dccfcc2aebd21ebb2b7f4ad54e2aa02a1e83e3496bf50f6

  • Size

    1.8MB

  • Sample

    221125-pnrttabf31

  • MD5

    c60b8e144432de67a315134bbde7f1ff

  • SHA1

    916e83f1d9defdee1d228f9a00f355f4c37436dd

  • SHA256

    28c5c2aa1ec6c8747dccfcc2aebd21ebb2b7f4ad54e2aa02a1e83e3496bf50f6

  • SHA512

    50bcc7098bc67eb246646bc0a47615dc68d6a69e182b7471c1d50f02044e65fd56f9528fa61864a813b8a3b636f7f7cd1335bd9faa0ee6ba6ed71418de52d06f

  • SSDEEP

    24576:YaUh/c6706LIFc8oP+oaTZaqdiXSp0c02uFG6dAk3CMpfY:YaUh/gyL8oPhaTZaqdwk0c05HGii

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      28c5c2aa1ec6c8747dccfcc2aebd21ebb2b7f4ad54e2aa02a1e83e3496bf50f6

    • Size

      1.8MB

    • MD5

      c60b8e144432de67a315134bbde7f1ff

    • SHA1

      916e83f1d9defdee1d228f9a00f355f4c37436dd

    • SHA256

      28c5c2aa1ec6c8747dccfcc2aebd21ebb2b7f4ad54e2aa02a1e83e3496bf50f6

    • SHA512

      50bcc7098bc67eb246646bc0a47615dc68d6a69e182b7471c1d50f02044e65fd56f9528fa61864a813b8a3b636f7f7cd1335bd9faa0ee6ba6ed71418de52d06f

    • SSDEEP

      24576:YaUh/c6706LIFc8oP+oaTZaqdiXSp0c02uFG6dAk3CMpfY:YaUh/gyL8oPhaTZaqdwk0c05HGii

    Score
    9/10
    upxpersistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks