Overview

overview

10

Static

static

8

9be82f192d...f3.exe

windows7-x64

10

9be82f192d...f3.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9be82f192deeaded742f8e1d3f462a5141269c916539fdea9e37575c1abf67f3

  • Size

    262KB

  • Sample

    221201-awyj1ahd32

  • MD5

    6bb88a3c27236409aa0fbbef41079c06

  • SHA1

    126966269b68da6b6bbf18ecb804614bc9c29726

  • SHA256

    9be82f192deeaded742f8e1d3f462a5141269c916539fdea9e37575c1abf67f3

  • SHA512

    f49d4b3d0358cb673cfeaa1d0b48589df059a8054e5828cbdf1eec31f3d94543b94a2a1434d04c236f7a79061afc0955ef4c842f780f53740aeb2c6700645362

  • SSDEEP

    3072:H8nW6fb/CH1pGLP7c7pJ1GE7am88d5Bt9pTlNg8pPD4Cqykp/v35aYV1kOOkSCWc:gWQ6HWLs+Eum1RNrkCqddcGRW4P

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      9be82f192deeaded742f8e1d3f462a5141269c916539fdea9e37575c1abf67f3

    • Size

      262KB

    • MD5

      6bb88a3c27236409aa0fbbef41079c06

    • SHA1

      126966269b68da6b6bbf18ecb804614bc9c29726

    • SHA256

      9be82f192deeaded742f8e1d3f462a5141269c916539fdea9e37575c1abf67f3

    • SHA512

      f49d4b3d0358cb673cfeaa1d0b48589df059a8054e5828cbdf1eec31f3d94543b94a2a1434d04c236f7a79061afc0955ef4c842f780f53740aeb2c6700645362

    • SSDEEP

      3072:H8nW6fb/CH1pGLP7c7pJ1GE7am88d5Bt9pTlNg8pPD4Cqykp/v35aYV1kOOkSCWc:gWQ6HWLs+Eum1RNrkCqddcGRW4P

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks