Overview

overview

8

Static

static

8

9969d63538...48.exe

windows7-x64

8

9969d63538...48.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9969d63538f42172ffb972a62bb0903af6b766ea52e7d85e4350cfd4719a6648

  • Size

    218KB

  • Sample

    221206-qpsceaca34

  • MD5

    8b551bb37d378cee1bf521bcdb5359be

  • SHA1

    735e227d33a8c1a9751e5b9676f975ba9a0ce05c

  • SHA256

    9969d63538f42172ffb972a62bb0903af6b766ea52e7d85e4350cfd4719a6648

  • SHA512

    c0e135956aefb9d8db1b85c764af8e2f1589bf6e14b1c70f713a74fd394df3ec568b2219abdfe996c866d7d58a9451a43b42375fb1030779f52077f6d3d26eb6

  • SSDEEP

    6144:F0/VHCqajEr0wPn9g85H6KnGp3xWCYUAF9:i/VHCHjErZPW0HHnGp3xWCM9

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      9969d63538f42172ffb972a62bb0903af6b766ea52e7d85e4350cfd4719a6648

    • Size

      218KB

    • MD5

      8b551bb37d378cee1bf521bcdb5359be

    • SHA1

      735e227d33a8c1a9751e5b9676f975ba9a0ce05c

    • SHA256

      9969d63538f42172ffb972a62bb0903af6b766ea52e7d85e4350cfd4719a6648

    • SHA512

      c0e135956aefb9d8db1b85c764af8e2f1589bf6e14b1c70f713a74fd394df3ec568b2219abdfe996c866d7d58a9451a43b42375fb1030779f52077f6d3d26eb6

    • SSDEEP

      6144:F0/VHCqajEr0wPn9g85H6KnGp3xWCYUAF9:i/VHCHjErZPW0HHnGp3xWCM9

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • Drops file in Drivers directory

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks