Overview

overview

8

Static

static

0c4d350b77...dc.dll

windows7-x64

8

0c4d350b77...dc.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c4d350b77f46404b7199caa64e42c22eb8cc3ec4ca24dcb73b0caaf5ba1fddc

  • Size

    128KB

  • Sample

    221205-te14cahb2y

  • MD5

    30374675ab4ad50f47c9d12d36199cb0

  • SHA1

    5e6dc5feba239bb98e419b6d7da5b03ef09470b4

  • SHA256

    0c4d350b77f46404b7199caa64e42c22eb8cc3ec4ca24dcb73b0caaf5ba1fddc

  • SHA512

    59ea9bbb3fe94f3d1cd6c6f02f2510b7511360e89cfd97f331c723f6a7d387cd448fbfff671304ac0032c5f337a9f69ca6e040a880b066b7248b09797331a4b9

  • SSDEEP

    3072:5TN1AfLWNTIILO9+9oSEJqg2qcL5FTJkuj0cjwmnHg:ZzAf6EHSEezTJkAXjwmnA

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      0c4d350b77f46404b7199caa64e42c22eb8cc3ec4ca24dcb73b0caaf5ba1fddc

    • Size

      128KB

    • MD5

      30374675ab4ad50f47c9d12d36199cb0

    • SHA1

      5e6dc5feba239bb98e419b6d7da5b03ef09470b4

    • SHA256

      0c4d350b77f46404b7199caa64e42c22eb8cc3ec4ca24dcb73b0caaf5ba1fddc

    • SHA512

      59ea9bbb3fe94f3d1cd6c6f02f2510b7511360e89cfd97f331c723f6a7d387cd448fbfff671304ac0032c5f337a9f69ca6e040a880b066b7248b09797331a4b9

    • SSDEEP

      3072:5TN1AfLWNTIILO9+9oSEJqg2qcL5FTJkuj0cjwmnHg:ZzAf6EHSEezTJkAXjwmnA

    Score
    8/10
    persistenceupx

    • Blocklisted process makes network request

    • Sets DLL path for service in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks