Overview

overview

10

Static

static

8

db244ec329...8a.exe

windows7-x64

10

db244ec329...8a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    db244ec32952c293c226a655067185e9ae54a54aaca986a17be8e97b4035bf8a

  • Size

    563KB

  • Sample

    221205-g9v5csde32

  • MD5

    3649228a712e1f779cd9105fbb87dd5f

  • SHA1

    b0bef992df1b3fc145fe35f88d101000343c3b73

  • SHA256

    db244ec32952c293c226a655067185e9ae54a54aaca986a17be8e97b4035bf8a

  • SHA512

    af761f82cade36d86e45d88ec4834a9a6123f239bd3f3e82b60f4769fd8ca293082d228b2eedc682c41502b1cc1179108f0217c47cdef0cfa0946b3c2f7cb9ad

  • SSDEEP

    12288:4uccUkmqm1K7vGXjBxoOR8D4V/hhnl3d6EyMDr:ccBK4vGT8O3/GVM/

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      db244ec32952c293c226a655067185e9ae54a54aaca986a17be8e97b4035bf8a

    • Size

      563KB

    • MD5

      3649228a712e1f779cd9105fbb87dd5f

    • SHA1

      b0bef992df1b3fc145fe35f88d101000343c3b73

    • SHA256

      db244ec32952c293c226a655067185e9ae54a54aaca986a17be8e97b4035bf8a

    • SHA512

      af761f82cade36d86e45d88ec4834a9a6123f239bd3f3e82b60f4769fd8ca293082d228b2eedc682c41502b1cc1179108f0217c47cdef0cfa0946b3c2f7cb9ad

    • SSDEEP

      12288:4uccUkmqm1K7vGXjBxoOR8D4V/hhnl3d6EyMDr:ccBK4vGT8O3/GVM/

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks