Overview

overview

8

Static

static

45e9e2603f...1f.exe

windows7-x64

8

45e9e2603f...1f.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    45e9e2603fbadfddb37ca53e30b53171dced3d8be8d7359b7f1586113095ce1f

  • Size

    27KB

  • Sample

    221201-1rt9wsec45

  • MD5

    218196f89850ad1a9ac4e1523ccd3654

  • SHA1

    2b9ad5c2b4369b4df63b8299fb6f232a24574963

  • SHA256

    45e9e2603fbadfddb37ca53e30b53171dced3d8be8d7359b7f1586113095ce1f

  • SHA512

    587d66362591d41e1cfb037f66e4c9ee61818a6bdf2aa9dda1040af9c2b24bd541f79b031297ce2f04222333af25db5d95b88988ec2f2126fd7d2191eec24275

  • SSDEEP

    384:Am4I6I9Bcp0YEND3XKC5p9avOgYcQAYCZgXtTHh3QVvV49LPY7KF7G71BFmnrSzn:x4yQW38vOgYIZghpaVOcmF7aBoOzff

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      45e9e2603fbadfddb37ca53e30b53171dced3d8be8d7359b7f1586113095ce1f

    • Size

      27KB

    • MD5

      218196f89850ad1a9ac4e1523ccd3654

    • SHA1

      2b9ad5c2b4369b4df63b8299fb6f232a24574963

    • SHA256

      45e9e2603fbadfddb37ca53e30b53171dced3d8be8d7359b7f1586113095ce1f

    • SHA512

      587d66362591d41e1cfb037f66e4c9ee61818a6bdf2aa9dda1040af9c2b24bd541f79b031297ce2f04222333af25db5d95b88988ec2f2126fd7d2191eec24275

    • SSDEEP

      384:Am4I6I9Bcp0YEND3XKC5p9avOgYcQAYCZgXtTHh3QVvV49LPY7KF7G71BFmnrSzn:x4yQW38vOgYIZghpaVOcmF7aBoOzff

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks