Overview

overview

8

Static

static

8

e08f646386...31.exe

windows7-x64

8

e08f646386...31.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e08f646386d5ffd5e6bb35ff0d30d2a4cf91c19c59ac37e7ece477bf57aaf831

  • Size

    820KB

  • Sample

    221202-12bkjahf24

  • MD5

    0222404f08bcaa87de9ae6d747edbbae

  • SHA1

    7481ca1fb5bb3849804f30ff7ca543db378d5c60

  • SHA256

    e08f646386d5ffd5e6bb35ff0d30d2a4cf91c19c59ac37e7ece477bf57aaf831

  • SHA512

    8b624710bd5a85d2463ccb86209559ec8ba0307c0fb39db3219bd927decd7f10bf3af197259e3a69248bb65af8ec8bd3a49010995620eb21ffd61142e2a2d17a

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitj1:r5sJo6YrFUiyAak11Ltj1

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      e08f646386d5ffd5e6bb35ff0d30d2a4cf91c19c59ac37e7ece477bf57aaf831

    • Size

      820KB

    • MD5

      0222404f08bcaa87de9ae6d747edbbae

    • SHA1

      7481ca1fb5bb3849804f30ff7ca543db378d5c60

    • SHA256

      e08f646386d5ffd5e6bb35ff0d30d2a4cf91c19c59ac37e7ece477bf57aaf831

    • SHA512

      8b624710bd5a85d2463ccb86209559ec8ba0307c0fb39db3219bd927decd7f10bf3af197259e3a69248bb65af8ec8bd3a49010995620eb21ffd61142e2a2d17a

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitj1:r5sJo6YrFUiyAak11Ltj1

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks