Overview

overview

8

Static

static

8

ab630db6cf...f7.exe

windows7-x64

8

ab630db6cf...f7.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab630db6cf89867cc8037af5da08fa39259e671ef65fb4ecae35c015a633dbf7

  • Size

    238KB

  • Sample

    221203-3aqw9aab8w

  • MD5

    da0d379af51fd10a8ca99b7ff84b2779

  • SHA1

    97ba43eba04bda9ff3067f12f282bae22afbc62d

  • SHA256

    ab630db6cf89867cc8037af5da08fa39259e671ef65fb4ecae35c015a633dbf7

  • SHA512

    d3ef568950f5f201b134ac7de139ae053233aac76788fa8ea6fd83317d55100c473647774ee482f6525785420deb4b880ba1d747590d3905486cdc3d786e4235

  • SSDEEP

    6144:5oSk2d/iP1FMxld3qac3TMfKC3XSTKGXylljag8dj:5oSk2d/iYld323TKFGX+BaHdj

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      ab630db6cf89867cc8037af5da08fa39259e671ef65fb4ecae35c015a633dbf7

    • Size

      238KB

    • MD5

      da0d379af51fd10a8ca99b7ff84b2779

    • SHA1

      97ba43eba04bda9ff3067f12f282bae22afbc62d

    • SHA256

      ab630db6cf89867cc8037af5da08fa39259e671ef65fb4ecae35c015a633dbf7

    • SHA512

      d3ef568950f5f201b134ac7de139ae053233aac76788fa8ea6fd83317d55100c473647774ee482f6525785420deb4b880ba1d747590d3905486cdc3d786e4235

    • SSDEEP

      6144:5oSk2d/iP1FMxld3qac3TMfKC3XSTKGXylljag8dj:5oSk2d/iYld323TKFGX+BaHdj

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks