Overview

overview

8

Static

static

3664b1a4f1...dc.exe

windows7-x64

8

3664b1a4f1...dc.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    3664b1a4f11624d811a69d7b0165c06473c8dc3d6197ebb8be3b9fcd251dfcdc

  • Size

    334KB

  • Sample

    221201-rpkg8sbb7y

  • MD5

    389bf52b8b2aa8cfae3ca55808202f00

  • SHA1

    cd9dbeffb2096da578ea493013cc4f020f150e02

  • SHA256

    3664b1a4f11624d811a69d7b0165c06473c8dc3d6197ebb8be3b9fcd251dfcdc

  • SHA512

    70d7770506ecf717d95018dd5cffac85ed2a571b989d6ad748e277267ce65a6ec437f9db465fcc7bb55e94f3ae04d9e39fcd090058814370e64d592635d3bbca

  • SSDEEP

    6144:d9P3DSrxOsPLzl3XJHQG01lg7qBUU2tW8vmwylShXD+YdkpLo2S0k7ab60Pb:Duxjjzl3X9GoquUGruAznkpMSbB

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      3664b1a4f11624d811a69d7b0165c06473c8dc3d6197ebb8be3b9fcd251dfcdc

    • Size

      334KB

    • MD5

      389bf52b8b2aa8cfae3ca55808202f00

    • SHA1

      cd9dbeffb2096da578ea493013cc4f020f150e02

    • SHA256

      3664b1a4f11624d811a69d7b0165c06473c8dc3d6197ebb8be3b9fcd251dfcdc

    • SHA512

      70d7770506ecf717d95018dd5cffac85ed2a571b989d6ad748e277267ce65a6ec437f9db465fcc7bb55e94f3ae04d9e39fcd090058814370e64d592635d3bbca

    • SSDEEP

      6144:d9P3DSrxOsPLzl3XJHQG01lg7qBUU2tW8vmwylShXD+YdkpLo2S0k7ab60Pb:Duxjjzl3X9GoquUGruAznkpMSbB

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks