Overview

overview

9

Static

static

8af44245f9...6b.exe

windows7-x64

9

8af44245f9...6b.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8af44245f900d7bda52f9fa8e49870ac6945d01bb53d8c8af5580e2fb795806b

  • Size

    26.0MB

  • Sample

    221128-bfpgtscf34

  • MD5

    0a324b71b0aa67419d18100554c7c7a1

  • SHA1

    45c9aa7c6dae9d0eae85dbc7419e667e1babc650

  • SHA256

    8af44245f900d7bda52f9fa8e49870ac6945d01bb53d8c8af5580e2fb795806b

  • SHA512

    fe057e486e6acaf8b88615b79429cec8849866c5e42d1834c5e7d184fa4ebead759952fc327f76ac1bc25b10f79cab9ca2974c6d0de1c9d42964a58025a91380

  • SSDEEP

    786432:IaKSoiHpca0WdasWjtRBJeOKkBpXmKzLeErr:GSoyc4dr8/kONXnzLeUr

Score
9/10
discoveryexploitpersistenceupx

Malware Config

Targets

    • Target

      8af44245f900d7bda52f9fa8e49870ac6945d01bb53d8c8af5580e2fb795806b

    • Size

      26.0MB

    • MD5

      0a324b71b0aa67419d18100554c7c7a1

    • SHA1

      45c9aa7c6dae9d0eae85dbc7419e667e1babc650

    • SHA256

      8af44245f900d7bda52f9fa8e49870ac6945d01bb53d8c8af5580e2fb795806b

    • SHA512

      fe057e486e6acaf8b88615b79429cec8849866c5e42d1834c5e7d184fa4ebead759952fc327f76ac1bc25b10f79cab9ca2974c6d0de1c9d42964a58025a91380

    • SSDEEP

      786432:IaKSoiHpca0WdasWjtRBJeOKkBpXmKzLeErr:GSoyc4dr8/kONXnzLeUr

    Score
    9/10
    discoveryexploitpersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Possible privilege escalation attempt

      exploit

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks