Overview

overview

8

Static

static

a97b292397...d9.exe

windows7-x64

8

a97b292397...d9.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a97b292397865c0e2ef228b3e245d2eec0bd167fb75f267d7ee9b46d0057f2d9

  • Size

    523KB

  • Sample

    221206-cza9zsha53

  • MD5

    5b641ac1f5f1c6eecb56c6910f59df07

  • SHA1

    cd0eb5b1c1cda52c4b74b22cb995558fd4fe1fe4

  • SHA256

    a97b292397865c0e2ef228b3e245d2eec0bd167fb75f267d7ee9b46d0057f2d9

  • SHA512

    29535fd3963b92ec5ac3b0d8eee1179e5d8415b241a9ea01f51c58eee824c297bd9356c6067c3388d67f7fb328c47be5902113e61ea49be8d2518f6258eceb02

  • SSDEEP

    12288:6Om/nK06mwh82duMZqF1QU83G4io8XHUijRql:t4IvdVwgJGHUiFG

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      a97b292397865c0e2ef228b3e245d2eec0bd167fb75f267d7ee9b46d0057f2d9

    • Size

      523KB

    • MD5

      5b641ac1f5f1c6eecb56c6910f59df07

    • SHA1

      cd0eb5b1c1cda52c4b74b22cb995558fd4fe1fe4

    • SHA256

      a97b292397865c0e2ef228b3e245d2eec0bd167fb75f267d7ee9b46d0057f2d9

    • SHA512

      29535fd3963b92ec5ac3b0d8eee1179e5d8415b241a9ea01f51c58eee824c297bd9356c6067c3388d67f7fb328c47be5902113e61ea49be8d2518f6258eceb02

    • SSDEEP

      12288:6Om/nK06mwh82duMZqF1QU83G4io8XHUijRql:t4IvdVwgJGHUiFG

    Score
    8/10
    persistenceupx

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks