Overview

overview

10

Static

static

8

f4541dc463...cc.exe

windows7-x64

10

f4541dc463...cc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4541dc4634c0b71b1de8d19226ba8a4cbfc38b82fe8f3b54de4116b2ed3b4cc

  • Size

    228KB

  • Sample

    221204-bnrxxsdg73

  • MD5

    0b1a2ac19735b9e583ffffe90f17f100

  • SHA1

    504277b928c97a633e7c22648e71da28014458cf

  • SHA256

    f4541dc4634c0b71b1de8d19226ba8a4cbfc38b82fe8f3b54de4116b2ed3b4cc

  • SHA512

    8fea62a01e05a2bd914786c551398bb38ef4c5d0aeb8bf5a3c038c2877a3a53a1af02e8a453691b54c9ebb30c4b6d0d9d2b383adf754395d228e33c357f740f9

  • SSDEEP

    1536:RZx8gcK8ossZDulaPnPuhkvJJth5SLnouy8uQkgB54vm5sCREACyZExpi487PU2:RZx8gJscuAnU+JYoutueXl59vC+48bU

Score
10/10
evasiontrojanupx

Malware Config

Targets

    • Target

      f4541dc4634c0b71b1de8d19226ba8a4cbfc38b82fe8f3b54de4116b2ed3b4cc

    • Size

      228KB

    • MD5

      0b1a2ac19735b9e583ffffe90f17f100

    • SHA1

      504277b928c97a633e7c22648e71da28014458cf

    • SHA256

      f4541dc4634c0b71b1de8d19226ba8a4cbfc38b82fe8f3b54de4116b2ed3b4cc

    • SHA512

      8fea62a01e05a2bd914786c551398bb38ef4c5d0aeb8bf5a3c038c2877a3a53a1af02e8a453691b54c9ebb30c4b6d0d9d2b383adf754395d228e33c357f740f9

    • SSDEEP

      1536:RZx8gcK8ossZDulaPnPuhkvJJth5SLnouy8uQkgB54vm5sCREACyZExpi487PU2:RZx8gJscuAnU+JYoutueXl59vC+48bU

    Score
    10/10
    evasiontrojanupx

    • Modifies firewall policy service

      evasion

    • UAC bypass

      evasiontrojan

    • Windows security bypass

      evasiontrojan

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Checks whether UAC is enabled

      evasiontrojan

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks