Overview

overview

10

Static

static

cae5883685...c1.exe

windows7-x64

10

cae5883685...c1.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    cae58836855dbba90023e670af548829f7680983758fa883f455029fb2b670c1

  • Size

    58KB

  • Sample

    221203-qccfesce94

  • MD5

    87c6df71a57e34dc4dbda6f236a669b1

  • SHA1

    912550f772a30e4ed81606596f2ef8a8cfa56490

  • SHA256

    cae58836855dbba90023e670af548829f7680983758fa883f455029fb2b670c1

  • SHA512

    a5567484c429dead2ccbfac4fbf2c79a84ae0dcf0d6d9a11efdbdd0ad2798c10af2d0a1adb41d6aba2129e46c53f4bad0ebe850db99861b3fedad7d12282f1b1

  • SSDEEP

    768:pm88vKUouYtbojVXtS8T0TmRzJ/OZmiO4fXztXLTGo:pmx8mV9D0W/jiO4rtXb

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      cae58836855dbba90023e670af548829f7680983758fa883f455029fb2b670c1

    • Size

      58KB

    • MD5

      87c6df71a57e34dc4dbda6f236a669b1

    • SHA1

      912550f772a30e4ed81606596f2ef8a8cfa56490

    • SHA256

      cae58836855dbba90023e670af548829f7680983758fa883f455029fb2b670c1

    • SHA512

      a5567484c429dead2ccbfac4fbf2c79a84ae0dcf0d6d9a11efdbdd0ad2798c10af2d0a1adb41d6aba2129e46c53f4bad0ebe850db99861b3fedad7d12282f1b1

    • SSDEEP

      768:pm88vKUouYtbojVXtS8T0TmRzJ/OZmiO4fXztXLTGo:pmx8mV9D0W/jiO4rtXb

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks