Overview

overview

8

Static

static

8

5cf7ffaf54...80.exe

windows7-x64

8

5cf7ffaf54...80.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5cf7ffaf543431d2bf442b3aefc3a59a58ad3d9eadeb2736abaa27ce6d38b780

  • Size

    976KB

  • Sample

    221206-3ada6add46

  • MD5

    0c349a77fbc0e72d16c72ab96f9a74b0

  • SHA1

    c17c87f78bcdf6e1d652e4afb39bc7fa672cd290

  • SHA256

    5cf7ffaf543431d2bf442b3aefc3a59a58ad3d9eadeb2736abaa27ce6d38b780

  • SHA512

    de39779206e40e03f904108f15d51520daf67325b3d52ba6511ae73571fda1b757d4a9db1755e66484333f0e4b94e3685296d60ab6d5b7a5997b28fd78c3834a

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjJx:r5sJo6YrFUiyAak11LtjJx

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      5cf7ffaf543431d2bf442b3aefc3a59a58ad3d9eadeb2736abaa27ce6d38b780

    • Size

      976KB

    • MD5

      0c349a77fbc0e72d16c72ab96f9a74b0

    • SHA1

      c17c87f78bcdf6e1d652e4afb39bc7fa672cd290

    • SHA256

      5cf7ffaf543431d2bf442b3aefc3a59a58ad3d9eadeb2736abaa27ce6d38b780

    • SHA512

      de39779206e40e03f904108f15d51520daf67325b3d52ba6511ae73571fda1b757d4a9db1755e66484333f0e4b94e3685296d60ab6d5b7a5997b28fd78c3834a

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjJx:r5sJo6YrFUiyAak11LtjJx

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks