Overview

overview

9

Static

static

d909a43632...47.exe

windows7-x64

9

d909a43632...47.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    d909a436328705c0d9ba179c90b50226c2f0e76e2375b49129c274125a8f1047

  • Size

    565KB

  • Sample

    221205-wxr99sge21

  • MD5

    cf2eef27cc3630ff18ef2449126d3758

  • SHA1

    dc84c70d9cc26706e3fd5f3aebef2917d0d6fe4c

  • SHA256

    d909a436328705c0d9ba179c90b50226c2f0e76e2375b49129c274125a8f1047

  • SHA512

    40cac068e6322ff531dac0c4e89914635d2aa5e1b4190d6d9c70621a8a5f6540848da6969950add61acccdc3e236626badc6159e3ff277e58c33c66fa9cae32b

  • SSDEEP

    6144:7GjSrChsrAYbY77Ui+sFA2imrVQDNWabt/CcBkG:7GOrQskh+HmrVQRtqc

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      d909a436328705c0d9ba179c90b50226c2f0e76e2375b49129c274125a8f1047

    • Size

      565KB

    • MD5

      cf2eef27cc3630ff18ef2449126d3758

    • SHA1

      dc84c70d9cc26706e3fd5f3aebef2917d0d6fe4c

    • SHA256

      d909a436328705c0d9ba179c90b50226c2f0e76e2375b49129c274125a8f1047

    • SHA512

      40cac068e6322ff531dac0c4e89914635d2aa5e1b4190d6d9c70621a8a5f6540848da6969950add61acccdc3e236626badc6159e3ff277e58c33c66fa9cae32b

    • SSDEEP

      6144:7GjSrChsrAYbY77Ui+sFA2imrVQDNWabt/CcBkG:7GOrQskh+HmrVQRtqc

    Score
    9/10
    persistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks