Overview

overview

10

Static

static

8

3398eb37cb...49.exe

windows7-x64

10

3398eb37cb...49.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3398eb37cbce8eecbb6f4d378f9b7ec0c606d4684256888a09dc2e312a091349

  • Size

    301KB

  • Sample

    221206-bbfdcsda32

  • MD5

    db6e0f73b3e5b5f8bbfd1d8def480d7c

  • SHA1

    d2f09bf2a30822525cf4d60341915ad83b036341

  • SHA256

    3398eb37cbce8eecbb6f4d378f9b7ec0c606d4684256888a09dc2e312a091349

  • SHA512

    08c549d2441bddfd66b830f6fc338d4c422eb7f2e45b5d2c2919f1c4720793c921d28256b68ab39bba1bad347f787c3c8f60a95af07eefd518838c1405643a22

  • SSDEEP

    6144:lvIgSMLwgkoK0zat8GzwzkIXfYnPY7gb1oK0zat8GzwzkIX9:lQgS0wCK0qjIQnAsbaK0qjIt

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      3398eb37cbce8eecbb6f4d378f9b7ec0c606d4684256888a09dc2e312a091349

    • Size

      301KB

    • MD5

      db6e0f73b3e5b5f8bbfd1d8def480d7c

    • SHA1

      d2f09bf2a30822525cf4d60341915ad83b036341

    • SHA256

      3398eb37cbce8eecbb6f4d378f9b7ec0c606d4684256888a09dc2e312a091349

    • SHA512

      08c549d2441bddfd66b830f6fc338d4c422eb7f2e45b5d2c2919f1c4720793c921d28256b68ab39bba1bad347f787c3c8f60a95af07eefd518838c1405643a22

    • SSDEEP

      6144:lvIgSMLwgkoK0zat8GzwzkIXfYnPY7gb1oK0zat8GzwzkIX9:lQgS0wCK0qjIQnAsbaK0qjIt

    Score
    10/10
    persistenceupx

    • Modifies system executable filetype association

      persistence

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks