75113397c1ad61acb4a356aece3ece16afb7ddc73f71fd669b5dc0832aac5b8a | Triage

Submit
Reports

Overview

overview

8

Static

static

8

75113397c1...8a.exe

windows7-x64

8

75113397c1...8a.exe

windows10-2004-x64

8

Sharing

General

Target

75113397c1ad61acb4a356aece3ece16afb7ddc73f71fd669b5dc0832aac5b8a
Size

414KB
Sample

221205-k14lxshf4y
MD5

2c8688371d1c42a94cd0b333b87b2793
SHA1

d829456288e7f51a4cd873b93d94ec8c7892bf08
SHA256

75113397c1ad61acb4a356aece3ece16afb7ddc73f71fd669b5dc0832aac5b8a
SHA512

df2e9bcd426408f0e8e2c674ab7fbe32ec10e51f9ffd16be5653f14cd1ae5e143a8f03abe16eecb822a394726ecf8e7daf433f028ce1c88d95c6de1338525017
SSDEEP

12288:HVgNzElYiFfJ45BFkg9wKQwxeysO1JngsiY5bN:1gV6rfC5BF3QTegGZN

Score

8^/10

evasion persistence upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

75113397c1ad61acb4a356aece3ece16afb7ddc73f71fd669b5dc0832aac5b8a.exe

Resource

win7-20221111-en

evasion persistence upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

75113397c1ad61acb4a356aece3ece16afb7ddc73f71fd669b5dc0832aac5b8a.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  
  75113397c1ad61acb4a356aece3ece16afb7ddc73f71fd669b5dc0832aac5b8a
- Size
  
  414KB
- MD5
  
  2c8688371d1c42a94cd0b333b87b2793
- SHA1
  
  d829456288e7f51a4cd873b93d94ec8c7892bf08
- SHA256
  
  75113397c1ad61acb4a356aece3ece16afb7ddc73f71fd669b5dc0832aac5b8a
- SHA512
  
  df2e9bcd426408f0e8e2c674ab7fbe32ec10e51f9ffd16be5653f14cd1ae5e143a8f03abe16eecb822a394726ecf8e7daf433f028ce1c88d95c6de1338525017
- SSDEEP
  
  12288:HVgNzElYiFfJ45BFkg9wKQwxeysO1JngsiY5bN:1gV6rfC5BF3QTegGZN
Score

8^/10

evasion persistence upx
- Executes dropped EXE
- Modifies Windows Firewall
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2

© 2018-2025

Terms | Privacy