Overview

overview

8

Static

static

8

8b2185a2ff...fe.exe

windows7-x64

8

8b2185a2ff...fe.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    8b2185a2ffe8fb0a516756aaeb134b8e3fedd499572badb72aa71c67a58932fe

  • Size

    388KB

  • Sample

    221202-bgb8wshb96

  • MD5

    796d2e3103b5f1159136297b474a40ba

  • SHA1

    d2913dcd549734e752701e2d5fd4910201b243f4

  • SHA256

    8b2185a2ffe8fb0a516756aaeb134b8e3fedd499572badb72aa71c67a58932fe

  • SHA512

    d99c449b8601a470108889767da4d61075c68f44574fc07e84a4d3cb6cec7395576c8b2000aec7ea05c60ab493e5882d182dc915747498b9635eebc8de1c102e

  • SSDEEP

    6144:96izSHaP1HIMd6gpWgUKlTUQ6GYDQeFQLNjBSY5l5SjoF1U:wiWHaRIMd/TUKlTKVDQeFQLNlSKE

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      8b2185a2ffe8fb0a516756aaeb134b8e3fedd499572badb72aa71c67a58932fe

    • Size

      388KB

    • MD5

      796d2e3103b5f1159136297b474a40ba

    • SHA1

      d2913dcd549734e752701e2d5fd4910201b243f4

    • SHA256

      8b2185a2ffe8fb0a516756aaeb134b8e3fedd499572badb72aa71c67a58932fe

    • SHA512

      d99c449b8601a470108889767da4d61075c68f44574fc07e84a4d3cb6cec7395576c8b2000aec7ea05c60ab493e5882d182dc915747498b9635eebc8de1c102e

    • SSDEEP

      6144:96izSHaP1HIMd6gpWgUKlTUQ6GYDQeFQLNjBSY5l5SjoF1U:wiWHaRIMd/TUKlTKVDQeFQLNlSKE

    Score
    8/10
    persistenceupx

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks