Overview

overview

8

Static

static

8

8635c3bbd1...f6.exe

windows7-x64

8

8635c3bbd1...f6.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8635c3bbd1bcee2257776708522a9c8291b54b72a2909ba7c25b7f905a84dbf6

  • Size

    625KB

  • Sample

    221127-a2zz1sbg4x

  • MD5

    c8d42fe6d12f6986472edb3eac79d87d

  • SHA1

    9b226951eac072fef165ffb407b9128e4afba0ac

  • SHA256

    8635c3bbd1bcee2257776708522a9c8291b54b72a2909ba7c25b7f905a84dbf6

  • SHA512

    52b4081f60959dbaeaade37aa7dfeded375e8ae019ecc77247cf0536075a0de4a348a8c6f2e9fc159730c1ebb60b786c9b264240f438ab8eecfc3521adde27e1

  • SSDEEP

    12288:76Wq4aaE6KwyF5L0Y2D1PqLff5u/Vkgftg3oTQjInBnWwG:hthEVaPqLMVN+EBhG

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      8635c3bbd1bcee2257776708522a9c8291b54b72a2909ba7c25b7f905a84dbf6

    • Size

      625KB

    • MD5

      c8d42fe6d12f6986472edb3eac79d87d

    • SHA1

      9b226951eac072fef165ffb407b9128e4afba0ac

    • SHA256

      8635c3bbd1bcee2257776708522a9c8291b54b72a2909ba7c25b7f905a84dbf6

    • SHA512

      52b4081f60959dbaeaade37aa7dfeded375e8ae019ecc77247cf0536075a0de4a348a8c6f2e9fc159730c1ebb60b786c9b264240f438ab8eecfc3521adde27e1

    • SSDEEP

      12288:76Wq4aaE6KwyF5L0Y2D1PqLff5u/Vkgftg3oTQjInBnWwG:hthEVaPqLMVN+EBhG

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks