Overview

overview

8

Static

static

979987d1a2...c4.exe

windows7-x64

8

979987d1a2...c4.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    979987d1a271ae00014f710788dc7008c0236d29a90cd4ab8985577253d81ec4

  • Size

    392KB

  • Sample

    221205-vvh35sab75

  • MD5

    1c596babc5b2c533cc78dbfb2b48f240

  • SHA1

    79e7f62aa7162d09e9dca04dbbbdb5db4c7c93f0

  • SHA256

    979987d1a271ae00014f710788dc7008c0236d29a90cd4ab8985577253d81ec4

  • SHA512

    c6cd7285e1e94f828c481bc31c8e9c97f38a271ca78ab685d514058d36e6bba22f3db7c749a49d50b792c43878e3fb38cf37f83df0bc6c5d0af1ee359c511ca9

  • SSDEEP

    6144:v8DIpZ8df86s0iC5sMwQ3BT+iNNJajBaiOVMIIy360VNJ9kVclv:vZpOfqC5sNQRC8HajBaLMobVNJ9ec

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      979987d1a271ae00014f710788dc7008c0236d29a90cd4ab8985577253d81ec4

    • Size

      392KB

    • MD5

      1c596babc5b2c533cc78dbfb2b48f240

    • SHA1

      79e7f62aa7162d09e9dca04dbbbdb5db4c7c93f0

    • SHA256

      979987d1a271ae00014f710788dc7008c0236d29a90cd4ab8985577253d81ec4

    • SHA512

      c6cd7285e1e94f828c481bc31c8e9c97f38a271ca78ab685d514058d36e6bba22f3db7c749a49d50b792c43878e3fb38cf37f83df0bc6c5d0af1ee359c511ca9

    • SSDEEP

      6144:v8DIpZ8df86s0iC5sMwQ3BT+iNNJajBaiOVMIIy360VNJ9kVclv:vZpOfqC5sNQRC8HajBaLMobVNJ9ec

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks