Overview

overview

9

Static

static

9

ee9681bb1d...89.dll

windows7-x64

9

ee9681bb1d...89.dll

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    ee9681bb1d51907b9aa5aa72b17f0419dfe5a2d805971926809acbded04c8889

  • Size

    37KB

  • Sample

    221204-bbbp6scf97

  • MD5

    1477aefb8f32e4b42586ede8c3e0f453

  • SHA1

    aa3c970390e2545b7d72cd848e5b6e9126cf3df7

  • SHA256

    ee9681bb1d51907b9aa5aa72b17f0419dfe5a2d805971926809acbded04c8889

  • SHA512

    53bda39a2242f5cfa5ff6919acb2f202a442b0901ddd73f551c81158e8d21916491d2f3a6df638f2e75299a0b34814cb52e90f569c0a64bd68263c6554e28397

  • SSDEEP

    768:EgvRYQ6Tu98ZXmVhXqAi/mu3QcHRItXyXnbcuyD7UdR:7vRYQ8W+XmiA8pFxI5yXnouy8dR

Score
9/10
upx

Malware Config

Targets

    • Target

      ee9681bb1d51907b9aa5aa72b17f0419dfe5a2d805971926809acbded04c8889

    • Size

      37KB

    • MD5

      1477aefb8f32e4b42586ede8c3e0f453

    • SHA1

      aa3c970390e2545b7d72cd848e5b6e9126cf3df7

    • SHA256

      ee9681bb1d51907b9aa5aa72b17f0419dfe5a2d805971926809acbded04c8889

    • SHA512

      53bda39a2242f5cfa5ff6919acb2f202a442b0901ddd73f551c81158e8d21916491d2f3a6df638f2e75299a0b34814cb52e90f569c0a64bd68263c6554e28397

    • SSDEEP

      768:EgvRYQ6Tu98ZXmVhXqAi/mu3QcHRItXyXnbcuyD7UdR:7vRYQ8W+XmiA8pFxI5yXnouy8dR

    Score
    9/10
    upx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks