General

  • Target

    5c3532758d19d321ce792055495f794a0269950e531ef7ba7663d4d1a57ef73d

  • Size

    5.1MB

  • Sample

    221201-fdh99aeg56

  • MD5

    3806ec985f76839a47627c1092ef684e

  • SHA1

    affbaabafbb84bb0c9bded888535568f07e6c97d

  • SHA256

    5c3532758d19d321ce792055495f794a0269950e531ef7ba7663d4d1a57ef73d

  • SHA512

    8db3cea3f27627ba93dc15b8d0c9e4767c299c2fc691f0cf4b23e6de35c5fbe39847449551cd3ff075ec1edd3cb39d2818d93af4f7bda1761c08d66a30737f6f

  • SSDEEP

    98304:5jxa+QimdhqnA4OMiRwc7DcdLaYLpgkX1vam84Az:51+imdhqnnOMOI+MgOymjAz

Score
9/10
upx

Malware Config

Targets

    • Target

      5c3532758d19d321ce792055495f794a0269950e531ef7ba7663d4d1a57ef73d

    • Size

      5.1MB

    • MD5

      3806ec985f76839a47627c1092ef684e

    • SHA1

      affbaabafbb84bb0c9bded888535568f07e6c97d

    • SHA256

      5c3532758d19d321ce792055495f794a0269950e531ef7ba7663d4d1a57ef73d

    • SHA512

      8db3cea3f27627ba93dc15b8d0c9e4767c299c2fc691f0cf4b23e6de35c5fbe39847449551cd3ff075ec1edd3cb39d2818d93af4f7bda1761c08d66a30737f6f

    • SSDEEP

      98304:5jxa+QimdhqnA4OMiRwc7DcdLaYLpgkX1vam84Az:51+imdhqnnOMOI+MgOymjAz

    Score
    9/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks