Overview

overview

8

Static

static

f23c3f4d87...77.exe

windows7-x64

8

f23c3f4d87...77.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    f23c3f4d872895a8f999ad07db9faa78b50c653e84441ee2a58a2ca17d81ca77

  • Size

    196KB

  • Sample

    221203-vy8szadh3w

  • MD5

    52149f8d3a3553745ca92ee77a9f2751

  • SHA1

    c42fb584c2efec1dfc8f2ed902f95c9bd6b348ec

  • SHA256

    f23c3f4d872895a8f999ad07db9faa78b50c653e84441ee2a58a2ca17d81ca77

  • SHA512

    44c796488040337828faf7d73860db600e52d9145461c9dc46d6724c0c9e989dd49bbb2c1f98fd2c258e42e95278a5e840291546d2a295ed0856b9a99453f737

  • SSDEEP

    3072:HbLoMcq4ulE1+BC3K5eq7q/Xvv7yw645wcz8+RDb5yTbq0vhehqr+hK:HbH6lK77qHjyw6Rw1RQTPhbr+0

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      f23c3f4d872895a8f999ad07db9faa78b50c653e84441ee2a58a2ca17d81ca77

    • Size

      196KB

    • MD5

      52149f8d3a3553745ca92ee77a9f2751

    • SHA1

      c42fb584c2efec1dfc8f2ed902f95c9bd6b348ec

    • SHA256

      f23c3f4d872895a8f999ad07db9faa78b50c653e84441ee2a58a2ca17d81ca77

    • SHA512

      44c796488040337828faf7d73860db600e52d9145461c9dc46d6724c0c9e989dd49bbb2c1f98fd2c258e42e95278a5e840291546d2a295ed0856b9a99453f737

    • SSDEEP

      3072:HbLoMcq4ulE1+BC3K5eq7q/Xvv7yw645wcz8+RDb5yTbq0vhehqr+hK:HbH6lK77qHjyw6Rw1RQTPhbr+0

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks