General

  • Target

    863d1a16e6785da2a6eb4336bc5d39206a177aa70c2ee5d97f96b2be26d43cc8

  • Size

    129KB

  • Sample

    221204-dpgjpafe8v

  • MD5

    9f83d5c240c8c6db23f95babf74f2d88

  • SHA1

    d67a2a40d3620555bf15f7b65d977bb2ee9e385f

  • SHA256

    863d1a16e6785da2a6eb4336bc5d39206a177aa70c2ee5d97f96b2be26d43cc8

  • SHA512

    0ea88d823af91e24030e36d05e1bf347dbd03dcb4b1d81d84caf84b4e8175f16e09d38a7c1d1a20b89c4a0c2c6da6ea7e2473e8b57a16c58b090845ffa8256b1

  • SSDEEP

    3072:KlbFONL/fuQ//IwC29zrLphZTkR81ISXoL5QpmFX7WYRYtPao77bocc9:+BE7WwC29phZ8pR5XOhao89

Score
8/10
upx

Malware Config

Targets

    • Target

      863d1a16e6785da2a6eb4336bc5d39206a177aa70c2ee5d97f96b2be26d43cc8

    • Size

      129KB

    • MD5

      9f83d5c240c8c6db23f95babf74f2d88

    • SHA1

      d67a2a40d3620555bf15f7b65d977bb2ee9e385f

    • SHA256

      863d1a16e6785da2a6eb4336bc5d39206a177aa70c2ee5d97f96b2be26d43cc8

    • SHA512

      0ea88d823af91e24030e36d05e1bf347dbd03dcb4b1d81d84caf84b4e8175f16e09d38a7c1d1a20b89c4a0c2c6da6ea7e2473e8b57a16c58b090845ffa8256b1

    • SSDEEP

      3072:KlbFONL/fuQ//IwC29zrLphZTkR81ISXoL5QpmFX7WYRYtPao77bocc9:+BE7WwC29phZ8pR5XOhao89

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks