Overview

overview

8

Static

static

3fb02feb28...9a.exe

windows7-x64

8

3fb02feb28...9a.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    3fb02feb2898d14dbb1b9b7d0879a7193d06ac4e131680f5ba1c1f15db70fe9a

  • Size

    312KB

  • Sample

    221128-dnrm9sef9z

  • MD5

    19b182bf61bb7286258db05738c199fb

  • SHA1

    823431bf6514b766de89f8d6d95c00e5c1d1d1c1

  • SHA256

    3fb02feb2898d14dbb1b9b7d0879a7193d06ac4e131680f5ba1c1f15db70fe9a

  • SHA512

    96a69d10e63fd5e8c854052d266aad45d21ac34d6c05729192dda1faa138de6d31307f4dc7db4bfafc2ea16348ed7a20f849f995833f4c9efdf186347adfac31

  • SSDEEP

    6144:BcTRLFhpIY/houf4qLAdlwzsT8pdUNhcxckiWZe6YB3W2viZsSQ7:6lxhikhoS4qL6iwTayNhcwaSBGZmS6

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      3fb02feb2898d14dbb1b9b7d0879a7193d06ac4e131680f5ba1c1f15db70fe9a

    • Size

      312KB

    • MD5

      19b182bf61bb7286258db05738c199fb

    • SHA1

      823431bf6514b766de89f8d6d95c00e5c1d1d1c1

    • SHA256

      3fb02feb2898d14dbb1b9b7d0879a7193d06ac4e131680f5ba1c1f15db70fe9a

    • SHA512

      96a69d10e63fd5e8c854052d266aad45d21ac34d6c05729192dda1faa138de6d31307f4dc7db4bfafc2ea16348ed7a20f849f995833f4c9efdf186347adfac31

    • SSDEEP

      6144:BcTRLFhpIY/houf4qLAdlwzsT8pdUNhcxckiWZe6YB3W2viZsSQ7:6lxhikhoS4qL6iwTayNhcwaSBGZmS6

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks