Overview

overview

8

Static

static

BackMir修...��.exe

windows7-x64

8

BackMir修...��.exe

windows10-2004-x64

8

当下软件园.url

windows7-x64

1

当下软件园.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    63a47b30cdc92aee99b70658d0d4f2d6689a684c753347281e9282e2818e91f6

  • Size

    1.6MB

  • Sample

    221127-y1l9jaba2w

  • MD5

    ca6ff8f2e74df2c266be9644216302b4

  • SHA1

    81f25e6e46a4a822fa194273d0d319944ebaf7c8

  • SHA256

    63a47b30cdc92aee99b70658d0d4f2d6689a684c753347281e9282e2818e91f6

  • SHA512

    5433edf3181aa1e0f2ba4f242f8596156a3b71bc9b96c1dfccc93ed0971c112a525085a7211ba0ee874b3e62209eb9c196af873ef22edcb617e957cff0d79db7

  • SSDEEP

    24576:pjQWjYsD9BngBcriJ38TEZ363cL3L/JvxW0O/xVFcbs4FAxpofhSgj+RB6/3VTCZ:xHj/iJ38Arr7Jv8Z/xVFpU8pqqr8c

Score
8/10
upx

Malware Config

Targets

    • Target

      BackMir修改器升级版.exe

    • Size

      1.8MB

    • MD5

      345903c2add834fbd407ea1480f2eed7

    • SHA1

      c0a8c5fe4fa67c645b8b69bacc9d4aea95e5d48d

    • SHA256

      7c2ae5ab3d290cfbd3e4744ccff223b925cfdb2d108ca6fc947d667598d91c3c

    • SHA512

      3657fb25f4bf96ad4a580f74adff046d3fe118ca1aca70a800e7e3d7dbca67f9c06f7187833a81dd74f251ccb86be918d5b83b850f86cc6c70dcbc543376990e

    • SSDEEP

      49152:rfiQ3hVXL8iL2BahwEO42qdbm6BX7TQ3a5yRjK:jZfoiqBeNjXI3a5KO

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

    • Target

      当下软件园.url

    • Size

      191B

    • MD5

      bdcc801fa8403eaecc71f63b740915af

    • SHA1

      09c2f81338105d011694863280a76ea62a4e915e

    • SHA256

      cab4f112f7e56424a7a00e6b6235a81be1ea980c2bd6529be764037f29de2ce5

    • SHA512

      8af0b84bfd990c499b9bd7811d581f249c6b974bd13737468c05825cab019f340ca42d3a5ee4c54cfb79cfa60bf230058ada271fe49925a0b8aa7a191c13295d

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks