Overview

overview

8

Static

static

82e61c1717...a0.exe

windows7-x64

8

82e61c1717...a0.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    82e61c17179e9e54ef044c38c0ebd84757e268c7befada209798a358999764a0

  • Size

    233KB

  • Sample

    221201-clxwtsaa3y

  • MD5

    f378fe32cea271f78c8f96d1b1eb79ab

  • SHA1

    53ceb36f522bd36963929b17a07a20070ca8cddb

  • SHA256

    82e61c17179e9e54ef044c38c0ebd84757e268c7befada209798a358999764a0

  • SHA512

    f879f33a4a7cbc475f9444787c5adca7cf751b04eb144b557f072c72767449aab0d4d700aedb7dae967e7c1c9ba77d007226784ad87dfe88eadec864edf5e8b1

  • SSDEEP

    6144:mhczSK0xst01yWrWfZFykIn/dTTl+nqQp6SCDNYnrHz:hzpm1ZSfZFWVQcSfnDz

Score
8/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      82e61c17179e9e54ef044c38c0ebd84757e268c7befada209798a358999764a0

    • Size

      233KB

    • MD5

      f378fe32cea271f78c8f96d1b1eb79ab

    • SHA1

      53ceb36f522bd36963929b17a07a20070ca8cddb

    • SHA256

      82e61c17179e9e54ef044c38c0ebd84757e268c7befada209798a358999764a0

    • SHA512

      f879f33a4a7cbc475f9444787c5adca7cf751b04eb144b557f072c72767449aab0d4d700aedb7dae967e7c1c9ba77d007226784ad87dfe88eadec864edf5e8b1

    • SSDEEP

      6144:mhczSK0xst01yWrWfZFykIn/dTTl+nqQp6SCDNYnrHz:hzpm1ZSfZFWVQcSfnDz

    Score
    8/10
    evasionpersistenceupx

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks