Overview

overview

10

Static

static

8

cd61522e00...c6.exe

windows7-x64

10

cd61522e00...c6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd61522e0022f91696bd19bbb6ab981b011edbdf1399b457c029c00179a1a7c6

  • Size

    2.1MB

  • Sample

    221127-c6gqcadd28

  • MD5

    5546a856529fabb21e55a0e63935c25f

  • SHA1

    9ef30031a4430a352db081a43f714d38fe1418f5

  • SHA256

    cd61522e0022f91696bd19bbb6ab981b011edbdf1399b457c029c00179a1a7c6

  • SHA512

    d32cf9a1042c118c2a660b9491dd52ebd493fe6d809376bf1efb6cbd77afa511f564890ca249dc4d54b8a2c0e5c9df58be726e253f5b94c2db8931a2e913d702

  • SSDEEP

    49152:o8nerQZbd2+erQZbd2f8nerQZbd2+erQZbd28b:SrQZQrQZ2rQZQrQZz

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      cd61522e0022f91696bd19bbb6ab981b011edbdf1399b457c029c00179a1a7c6

    • Size

      2.1MB

    • MD5

      5546a856529fabb21e55a0e63935c25f

    • SHA1

      9ef30031a4430a352db081a43f714d38fe1418f5

    • SHA256

      cd61522e0022f91696bd19bbb6ab981b011edbdf1399b457c029c00179a1a7c6

    • SHA512

      d32cf9a1042c118c2a660b9491dd52ebd493fe6d809376bf1efb6cbd77afa511f564890ca249dc4d54b8a2c0e5c9df58be726e253f5b94c2db8931a2e913d702

    • SSDEEP

      49152:o8nerQZbd2+erQZbd2f8nerQZbd2+erQZbd28b:SrQZQrQZ2rQZQrQZz

    Score
    10/10
    evasionpersistenceupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks