Overview

overview

9

Static

static

ʮ·...��.exe

windows7-x64

9

ʮ·...��.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c32be6a7570c26be9b3e8595604738d8c436de5de458dfbf0b21b7a977da93b5

  • Size

    1.1MB

  • Sample

    221125-xkfalsbc3s

  • MD5

    298a850ef5839c0f4585518cd326b5b1

  • SHA1

    9d0eacc0250877e13c4bc3caafb6d1bec2594fb0

  • SHA256

    c32be6a7570c26be9b3e8595604738d8c436de5de458dfbf0b21b7a977da93b5

  • SHA512

    b1e7cd0b742eda57c2a80321088515093cf4122f27c3c60158de3e6ba4fa67e77e9261dce36e232bb62f410f82598429766e1ee5df3db95f5cdd5dd3ce52bcd6

  • SSDEEP

    24576:8jc9My8Fk7ve8mAaFmXeLY0YbTtfTON8diOoMkZc6kkl3:8jkwFhAaF0h0YbdOGoOaZc6kkV

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      ʮ·ٶɲɼ.exe

    • Size

      1.5MB

    • MD5

      c25db52ae51bf4a6e841d6a668f932e3

    • SHA1

      2d2b306591c6fedcd83364559bfc65b5d888b1b8

    • SHA256

      77712379fe96bb3620bd4e9bf1baf5044235e6ddeaa1bcdd1ab1b7734268efc8

    • SHA512

      03407fd8650f0773cc60aa332b39ae614e4ffb8e83094c5d85908e4f45d2ab2c121967e57ae40fda8f01ac882ec1672daf2f94d9580b24950d4fb520c61e909c

    • SSDEEP

      24576:HtPuAvj4hqebXCEFXSpTZaqdiXSp0c02uFG6dAk3CMs/:HL74PRdYTZaqdwk0c05HGiy

    Score
    9/10
    upxpersistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks