Overview

overview

8

Static

static

8

94c8a2393d...a3.exe

windows7-x64

8

94c8a2393d...a3.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    94c8a2393d33911a15720036b7a635c1e3249069bc8894f8a1672a3720073ca3

  • Size

    417KB

  • Sample

    221206-x3lv4saa9z

  • MD5

    ca96317168cbf4942c481d5a8a2df788

  • SHA1

    c0f02cfd74165edb004eddb30d9a2ac88cc8ba06

  • SHA256

    94c8a2393d33911a15720036b7a635c1e3249069bc8894f8a1672a3720073ca3

  • SHA512

    46b1a4ea84d742561527b861c96d4608497f02518b32b0ae94e4f46ac87c194ae8f2517856bbc7eb9cdf0cd9220ddef257687949a95ca6aba8fc041d06c29a25

  • SSDEEP

    6144:XW4WRkxlYts/NZiDNvk2Qppw/ePFeNfuGsGp90MgzQazjkg83ONGIk2q+cCr6se:G4WRknYYN0G/pp+EFEN0dQazM3Og1

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      94c8a2393d33911a15720036b7a635c1e3249069bc8894f8a1672a3720073ca3

    • Size

      417KB

    • MD5

      ca96317168cbf4942c481d5a8a2df788

    • SHA1

      c0f02cfd74165edb004eddb30d9a2ac88cc8ba06

    • SHA256

      94c8a2393d33911a15720036b7a635c1e3249069bc8894f8a1672a3720073ca3

    • SHA512

      46b1a4ea84d742561527b861c96d4608497f02518b32b0ae94e4f46ac87c194ae8f2517856bbc7eb9cdf0cd9220ddef257687949a95ca6aba8fc041d06c29a25

    • SSDEEP

      6144:XW4WRkxlYts/NZiDNvk2Qppw/ePFeNfuGsGp90MgzQazjkg83ONGIk2q+cCr6se:G4WRknYYN0G/pp+EFEN0dQazM3Og1

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks