Overview

overview

8

Static

static

a6f3462ec2...09.exe

windows7-x64

8

a6f3462ec2...09.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    a6f3462ec2668e28ce0ba68b6d8516380de1cb013706b8cae39ab885d88fbc09

  • Size

    408KB

  • Sample

    221204-aeltwahe54

  • MD5

    93550c17570aea9b3966e153d8f485f6

  • SHA1

    b51a5c792d9e29f45a9ec805e907f737bb5f2d9f

  • SHA256

    a6f3462ec2668e28ce0ba68b6d8516380de1cb013706b8cae39ab885d88fbc09

  • SHA512

    9fa963db449993fdd60a2ca3729e67a9edbb5391460afc8567a8156d08c59263911eda3a220350036189599d60a2c8148ad8aabd543546c36d7b69f738ae1e7e

  • SSDEEP

    3072:g7gCWzN6UJ8yjo54lFC47y3rQcTve0C4wMOkpSf3l3rJAD6lm:RzN6Ryjm0Y423rQcC0MRkWq6l

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      a6f3462ec2668e28ce0ba68b6d8516380de1cb013706b8cae39ab885d88fbc09

    • Size

      408KB

    • MD5

      93550c17570aea9b3966e153d8f485f6

    • SHA1

      b51a5c792d9e29f45a9ec805e907f737bb5f2d9f

    • SHA256

      a6f3462ec2668e28ce0ba68b6d8516380de1cb013706b8cae39ab885d88fbc09

    • SHA512

      9fa963db449993fdd60a2ca3729e67a9edbb5391460afc8567a8156d08c59263911eda3a220350036189599d60a2c8148ad8aabd543546c36d7b69f738ae1e7e

    • SSDEEP

      3072:g7gCWzN6UJ8yjo54lFC47y3rQcTve0C4wMOkpSf3l3rJAD6lm:RzN6Ryjm0Y423rQcC0MRkWq6l

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks