Overview

overview

8

Static

static

def451bd60...98.exe

windows7-x64

8

def451bd60...98.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    def451bd60424758124b27f2edef1c34ea6f161ef8e439e9caa6214c404d0c98

  • Size

    277KB

  • Sample

    221204-rd82fsae6w

  • MD5

    615b903b5de8a95560666c5193812bc0

  • SHA1

    e68f29c0dd2f29a6e69ccaf22353ff2591b10951

  • SHA256

    def451bd60424758124b27f2edef1c34ea6f161ef8e439e9caa6214c404d0c98

  • SHA512

    2882e67885b44a316326ab390bbf5c81f536549ff82bacff34f47677daaf3cfa6a772c38e5a175fe1704a33007dc20ff262097ef75cbfd2c7203ca2497018ce7

  • SSDEEP

    6144:aFC2F8NXC796TB9vj48x1zj8bhqrNa0witGduC07p:aPeVQkTrvj4PC3DYdu5p

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      def451bd60424758124b27f2edef1c34ea6f161ef8e439e9caa6214c404d0c98

    • Size

      277KB

    • MD5

      615b903b5de8a95560666c5193812bc0

    • SHA1

      e68f29c0dd2f29a6e69ccaf22353ff2591b10951

    • SHA256

      def451bd60424758124b27f2edef1c34ea6f161ef8e439e9caa6214c404d0c98

    • SHA512

      2882e67885b44a316326ab390bbf5c81f536549ff82bacff34f47677daaf3cfa6a772c38e5a175fe1704a33007dc20ff262097ef75cbfd2c7203ca2497018ce7

    • SSDEEP

      6144:aFC2F8NXC796TB9vj48x1zj8bhqrNa0witGduC07p:aPeVQkTrvj4PC3DYdu5p

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks