Overview

overview

8

Static

static

27a2117b31...ad.exe

windows7-x64

8

27a2117b31...ad.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27a2117b3149fca28343bb383829a57444a5e2f96987176d3d3a3cf266e7b8ad

  • Size

    2.7MB

  • Sample

    221127-xv8d5sff8y

  • MD5

    47bb6ccfd3ab81d288348ffa1628eeed

  • SHA1

    a458d25bc8cf52b9cc2b5f2161e866b57679b793

  • SHA256

    27a2117b3149fca28343bb383829a57444a5e2f96987176d3d3a3cf266e7b8ad

  • SHA512

    c236d6407168908d69999df6a2921f487d6390f586ff2da78a26e39fcb9f03db695c703cabd88b042ee7650d1ef2bd2748024d720f2329dcf6f138f44e2cb29e

  • SSDEEP

    12288:2rLPeu3oN2OPt5X0v0SK/lceAuWSOicN6LkPT:2321NJt5X0cSiAnSOiT4r

Score
8/10
discoveryexploitpersistenceupx

Malware Config

Targets

    • Target

      27a2117b3149fca28343bb383829a57444a5e2f96987176d3d3a3cf266e7b8ad

    • Size

      2.7MB

    • MD5

      47bb6ccfd3ab81d288348ffa1628eeed

    • SHA1

      a458d25bc8cf52b9cc2b5f2161e866b57679b793

    • SHA256

      27a2117b3149fca28343bb383829a57444a5e2f96987176d3d3a3cf266e7b8ad

    • SHA512

      c236d6407168908d69999df6a2921f487d6390f586ff2da78a26e39fcb9f03db695c703cabd88b042ee7650d1ef2bd2748024d720f2329dcf6f138f44e2cb29e

    • SSDEEP

      12288:2rLPeu3oN2OPt5X0v0SK/lceAuWSOicN6LkPT:2321NJt5X0cSiAnSOiT4r

    Score
    8/10
    discoveryexploitpersistenceupx

    • Executes dropped EXE

    • Possible privilege escalation attempt

      exploit

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks