Overview

overview

10

Static

static

8

d4999a0da4...34.exe

windows7-x64

10

d4999a0da4...34.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d4999a0da4b0fa66872f79ce232957fc0ebed699a393fef75a3ae9fe6fde6834

  • Size

    452KB

  • Sample

    221127-2gjwvade74

  • MD5

    67719fd30faa2bc3768a2fedc073e868

  • SHA1

    31d0b6f8e9ab1ef87033b60461201a263324de6b

  • SHA256

    d4999a0da4b0fa66872f79ce232957fc0ebed699a393fef75a3ae9fe6fde6834

  • SHA512

    7263e6230e827c41f3470bda1e05f028f6aec366a0e318fba381d10907921042e386ead8120488a597276e3ed5db6d0a4af3ff898a96978fcfaac0def7a95717

  • SSDEEP

    6144:5uHOP/UOPSe570Szp3Znmy+g4IE2EOoAyqCPZIundXAnmy+g4H:gOEOB06aOoArCPZu2

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      d4999a0da4b0fa66872f79ce232957fc0ebed699a393fef75a3ae9fe6fde6834

    • Size

      452KB

    • MD5

      67719fd30faa2bc3768a2fedc073e868

    • SHA1

      31d0b6f8e9ab1ef87033b60461201a263324de6b

    • SHA256

      d4999a0da4b0fa66872f79ce232957fc0ebed699a393fef75a3ae9fe6fde6834

    • SHA512

      7263e6230e827c41f3470bda1e05f028f6aec366a0e318fba381d10907921042e386ead8120488a597276e3ed5db6d0a4af3ff898a96978fcfaac0def7a95717

    • SSDEEP

      6144:5uHOP/UOPSe570Szp3Znmy+g4IE2EOoAyqCPZIundXAnmy+g4H:gOEOB06aOoArCPZu2

    Score
    10/10
    evasionpersistenceupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks