Overview

overview

10

Static

static

b0a3a6a98d...bd.exe

windows7-x64

10

b0a3a6a98d...bd.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0a3a6a98d19153cce8e5b267770f7568817197735d25e4ceb485dfc91b2e6bd

  • Size

    213KB

  • Sample

    221128-c3nz9adb7t

  • MD5

    69ba31d9ab966887c7070d24b07bb9d1

  • SHA1

    9a4055f08dcfd7cb2a190675c837f8b0f624c783

  • SHA256

    b0a3a6a98d19153cce8e5b267770f7568817197735d25e4ceb485dfc91b2e6bd

  • SHA512

    e4d74b063aa6360aa0acda1e5914b37804ab74c4c5d13531eeab8453b626f45bcb7d314cb1bf1261c4f1f46d0b678f0f066f94be4d84dbb3dde431c6823786b8

  • SSDEEP

    3072:rJK3AjeZ7Rwwp5MdaNElZzI31zPB0OA4yxLTKB2+uO9AAa6QEp7BzwtON24qlQRx:rJKwWtbMMQI3xiViL/SAt31ua2ORg6

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      b0a3a6a98d19153cce8e5b267770f7568817197735d25e4ceb485dfc91b2e6bd

    • Size

      213KB

    • MD5

      69ba31d9ab966887c7070d24b07bb9d1

    • SHA1

      9a4055f08dcfd7cb2a190675c837f8b0f624c783

    • SHA256

      b0a3a6a98d19153cce8e5b267770f7568817197735d25e4ceb485dfc91b2e6bd

    • SHA512

      e4d74b063aa6360aa0acda1e5914b37804ab74c4c5d13531eeab8453b626f45bcb7d314cb1bf1261c4f1f46d0b678f0f066f94be4d84dbb3dde431c6823786b8

    • SSDEEP

      3072:rJK3AjeZ7Rwwp5MdaNElZzI31zPB0OA4yxLTKB2+uO9AAa6QEp7BzwtON24qlQRx:rJKwWtbMMQI3xiViL/SAt31ua2ORg6

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks