Overview

overview

8

Static

static

ba964b6a58...40.exe

windows7-x64

8

ba964b6a58...40.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    ba964b6a5815437052bd34317ed1164c4928c99c8a2fedf74ab597e40edabb40

  • Size

    451KB

  • Sample

    221206-rzc6xaag2s

  • MD5

    68240a04f8a98c3d08ae6a1878148258

  • SHA1

    5de9e3400f000f30c720bf885a9782c676477e5a

  • SHA256

    ba964b6a5815437052bd34317ed1164c4928c99c8a2fedf74ab597e40edabb40

  • SHA512

    73e46c001a14a66caf3de3ab0685dd4e34bf5dbf039a115f67d344fb564d66c4c9685c8676a7674334f6b32aba69999be19c4c83d02fe618b0fe293d5c0a608d

  • SSDEEP

    12288:DW1Ry2PUtFQyerhXesb8BmMWNc9fqUEK+iuzhbsbNU8aS5kX:DW1ISUtayGAsbMoiJSK+FINU7iO

Score
8/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      ba964b6a5815437052bd34317ed1164c4928c99c8a2fedf74ab597e40edabb40

    • Size

      451KB

    • MD5

      68240a04f8a98c3d08ae6a1878148258

    • SHA1

      5de9e3400f000f30c720bf885a9782c676477e5a

    • SHA256

      ba964b6a5815437052bd34317ed1164c4928c99c8a2fedf74ab597e40edabb40

    • SHA512

      73e46c001a14a66caf3de3ab0685dd4e34bf5dbf039a115f67d344fb564d66c4c9685c8676a7674334f6b32aba69999be19c4c83d02fe618b0fe293d5c0a608d

    • SSDEEP

      12288:DW1Ry2PUtFQyerhXesb8BmMWNc9fqUEK+iuzhbsbNU8aS5kX:DW1ISUtayGAsbMoiJSK+FINU7iO

    Score
    8/10
    evasionpersistenceupx

    • Disables Task Manager via registry modification

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks