Overview

overview

8

Static

static

76caab5bad...b7.exe

windows7-x64

8

76caab5bad...b7.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76caab5bad226a514273599d1d48f2326edd566304b60f8a50c46af4af0b4eb7

  • Size

    399KB

  • Sample

    221130-ly6h6sda5w

  • MD5

    8fa35490d847a87aa02e8bac7e4047c2

  • SHA1

    6560f4484c89b98ae564232091503861b3621b42

  • SHA256

    76caab5bad226a514273599d1d48f2326edd566304b60f8a50c46af4af0b4eb7

  • SHA512

    c917d7b144fbaeeda0d9f1308f78d2b164dc827d2acb9a2f32835ee27bec4632669596a89504d481ea8e231ee4231242ad0d62a9365f9871dd6748402ce64197

  • SSDEEP

    6144:Dn8NAEgyu76bpwG+eR3eB6Yb9+bdLZQ08gfg4gS4uYz5A60rfEk8fnjRIk4:Ok763+e0XKDX8gfkYYdL0rstnG

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      76caab5bad226a514273599d1d48f2326edd566304b60f8a50c46af4af0b4eb7

    • Size

      399KB

    • MD5

      8fa35490d847a87aa02e8bac7e4047c2

    • SHA1

      6560f4484c89b98ae564232091503861b3621b42

    • SHA256

      76caab5bad226a514273599d1d48f2326edd566304b60f8a50c46af4af0b4eb7

    • SHA512

      c917d7b144fbaeeda0d9f1308f78d2b164dc827d2acb9a2f32835ee27bec4632669596a89504d481ea8e231ee4231242ad0d62a9365f9871dd6748402ce64197

    • SSDEEP

      6144:Dn8NAEgyu76bpwG+eR3eB6Yb9+bdLZQ08gfg4gS4uYz5A60rfEk8fnjRIk4:Ok763+e0XKDX8gfkYYdL0rstnG

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks