Overview

overview

8

Static

static

8

8fad339a96...d9.exe

windows7-x64

8

8fad339a96...d9.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    8fad339a96dcbe59fc944ec0c564f18b07cdd99a8f02df3590b6eac0d1aac7d9

  • Size

    13KB

  • Sample

    221206-x5evksfe46

  • MD5

    ddd316358e1379f1dc9251f85870d5e9

  • SHA1

    68cd37080c4b7661616b4a56dd0687b1e2c6ecaf

  • SHA256

    8fad339a96dcbe59fc944ec0c564f18b07cdd99a8f02df3590b6eac0d1aac7d9

  • SHA512

    6d638b4ed93c7b6f1167382fe937212cff1ec1cb914db3f7e6f50eedb3ef91fdcd3eaab5e5f8994727960bdbcd5d0d34e8327d60eb6aa4a09f9d5f661461782d

  • SSDEEP

    384:hbAi/kAaNJawcudoD7UF91eOPA3kaQPAIH:FAi/SnbcuyD7Uj1

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      8fad339a96dcbe59fc944ec0c564f18b07cdd99a8f02df3590b6eac0d1aac7d9

    • Size

      13KB

    • MD5

      ddd316358e1379f1dc9251f85870d5e9

    • SHA1

      68cd37080c4b7661616b4a56dd0687b1e2c6ecaf

    • SHA256

      8fad339a96dcbe59fc944ec0c564f18b07cdd99a8f02df3590b6eac0d1aac7d9

    • SHA512

      6d638b4ed93c7b6f1167382fe937212cff1ec1cb914db3f7e6f50eedb3ef91fdcd3eaab5e5f8994727960bdbcd5d0d34e8327d60eb6aa4a09f9d5f661461782d

    • SSDEEP

      384:hbAi/kAaNJawcudoD7UF91eOPA3kaQPAIH:FAi/SnbcuyD7Uj1

    Score
    8/10
    persistenceupx

    • Modifies AppInit DLL entries

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks