Overview

overview

9

Static

static

8

f39bb07890...74.exe

windows7-x64

9

f39bb07890...74.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    f39bb0789013983467bd3a281b547e556e01f3c95dafa6b3e1edc504df957f74

  • Size

    198KB

  • Sample

    221206-xwb3bshe31

  • MD5

    dfef99c8638b87859046f5b8654e0e28

  • SHA1

    a81d9c8aa6a4947c2df49cba68e070242f1dfde2

  • SHA256

    f39bb0789013983467bd3a281b547e556e01f3c95dafa6b3e1edc504df957f74

  • SHA512

    e481b4c574f0ad6549f5de24678d28a70b07e2e7585097fbce09effb388f8e2827a94ba2e4dfdaaae3757660cea9103d20025b7b0d7907d1916a2867d9d462bb

  • SSDEEP

    6144:JI1XoZKzIUxrc5NYXSsq1fMbU8p9OGaLzy7OmoyBYQpQ4:J+WKMaWWiBQU8pvN55BXpP

Score
9/10
upx

Malware Config

Targets

    • Target

      f39bb0789013983467bd3a281b547e556e01f3c95dafa6b3e1edc504df957f74

    • Size

      198KB

    • MD5

      dfef99c8638b87859046f5b8654e0e28

    • SHA1

      a81d9c8aa6a4947c2df49cba68e070242f1dfde2

    • SHA256

      f39bb0789013983467bd3a281b547e556e01f3c95dafa6b3e1edc504df957f74

    • SHA512

      e481b4c574f0ad6549f5de24678d28a70b07e2e7585097fbce09effb388f8e2827a94ba2e4dfdaaae3757660cea9103d20025b7b0d7907d1916a2867d9d462bb

    • SSDEEP

      6144:JI1XoZKzIUxrc5NYXSsq1fMbU8p9OGaLzy7OmoyBYQpQ4:J+WKMaWWiBQU8pvN55BXpP

    Score
    9/10
    upx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Blocklisted process makes network request

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks