Overview

overview

8

Static

static

8

b04ecb384f...e5.exe

windows7-x64

8

b04ecb384f...e5.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    b04ecb384f1fa08ca1c17fae296952934a7cc5dba8acea73520446d17632f0e5

  • Size

    632KB

  • Sample

    221203-gx86fsef6s

  • MD5

    07274c381cdaf2225417606ddd4d34da

  • SHA1

    f7c390f73fcc2216f1c1493d84eeee42c9fd364c

  • SHA256

    b04ecb384f1fa08ca1c17fae296952934a7cc5dba8acea73520446d17632f0e5

  • SHA512

    580b7dff81ac3b3e002a587fea60402d76a34cb7a6fda35b162e0a1176d92ca25ddf1bf0b16790f3eb0df309a6d0e1e1649f2db29aad3557b8813ba9f8256408

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjc:r5sJo6YrFUiyAak11Ltjc

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      b04ecb384f1fa08ca1c17fae296952934a7cc5dba8acea73520446d17632f0e5

    • Size

      632KB

    • MD5

      07274c381cdaf2225417606ddd4d34da

    • SHA1

      f7c390f73fcc2216f1c1493d84eeee42c9fd364c

    • SHA256

      b04ecb384f1fa08ca1c17fae296952934a7cc5dba8acea73520446d17632f0e5

    • SHA512

      580b7dff81ac3b3e002a587fea60402d76a34cb7a6fda35b162e0a1176d92ca25ddf1bf0b16790f3eb0df309a6d0e1e1649f2db29aad3557b8813ba9f8256408

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjc:r5sJo6YrFUiyAak11Ltjc

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks