Overview

overview

8

Static

static

fc0dbdd56a...eb.exe

windows7-x64

8

fc0dbdd56a...eb.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    fc0dbdd56aeb8788d4f23655508ea2d4c30851c244665dc6b656ca9c8e9488eb

  • Size

    368KB

  • Sample

    221205-vqwhnshg77

  • MD5

    0c5f55fb6fc96bdd61051b0056fe8150

  • SHA1

    daa6e2abe28ed6724a3cc9adfebf822bcda34b67

  • SHA256

    fc0dbdd56aeb8788d4f23655508ea2d4c30851c244665dc6b656ca9c8e9488eb

  • SHA512

    d342fa044766fae72a515b146376686ea6133992375c84ca9ce72eb0ee65e7951e796e6790c4feb4c7fa874771cdf4ca5be579977836155ce9bf4bef6c5ff2ec

  • SSDEEP

    6144:IMz6ybKh6XtD7GYhF2l40VeTr1XYnL/gv73oVG88DwTEznoOsfVFXluV6mzTTwHm:TzCcXtGYhFk40kTJXYbu8Wvbsf3luHz

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      fc0dbdd56aeb8788d4f23655508ea2d4c30851c244665dc6b656ca9c8e9488eb

    • Size

      368KB

    • MD5

      0c5f55fb6fc96bdd61051b0056fe8150

    • SHA1

      daa6e2abe28ed6724a3cc9adfebf822bcda34b67

    • SHA256

      fc0dbdd56aeb8788d4f23655508ea2d4c30851c244665dc6b656ca9c8e9488eb

    • SHA512

      d342fa044766fae72a515b146376686ea6133992375c84ca9ce72eb0ee65e7951e796e6790c4feb4c7fa874771cdf4ca5be579977836155ce9bf4bef6c5ff2ec

    • SSDEEP

      6144:IMz6ybKh6XtD7GYhF2l40VeTr1XYnL/gv73oVG88DwTEznoOsfVFXluV6mzTTwHm:TzCcXtGYhFk40kTJXYbu8Wvbsf3luHz

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks