Overview

overview

8

Static

static

b1890a2a92...76.exe

windows7-x64

8

b1890a2a92...76.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b1890a2a92e8357a0d1282f5e90ebea75a8f2df4d0f918d24611cafa173f4f76

  • Size

    338KB

  • Sample

    221207-by26msfd8w

  • MD5

    94a5ee594883ce532b54ae61b131f688

  • SHA1

    0a12350accddf38d041a1610eacf838722b361e5

  • SHA256

    b1890a2a92e8357a0d1282f5e90ebea75a8f2df4d0f918d24611cafa173f4f76

  • SHA512

    2577537a57dba10bca20c76fc8c1084c880db7c55c1122d9cbe2543f450ce660fd4f47e490c4aaf1d5206356cfac25290dd4df9e6e8cf2e7021293f58c2b3f8e

  • SSDEEP

    6144:cJnc64DCtD752cycYt4Tl9HSw4T2xmEKhDYfJE9kfIy4jNYoZooqwNgk:cJcdK75tHYt4rj4TCxDfIyUjodk

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      b1890a2a92e8357a0d1282f5e90ebea75a8f2df4d0f918d24611cafa173f4f76

    • Size

      338KB

    • MD5

      94a5ee594883ce532b54ae61b131f688

    • SHA1

      0a12350accddf38d041a1610eacf838722b361e5

    • SHA256

      b1890a2a92e8357a0d1282f5e90ebea75a8f2df4d0f918d24611cafa173f4f76

    • SHA512

      2577537a57dba10bca20c76fc8c1084c880db7c55c1122d9cbe2543f450ce660fd4f47e490c4aaf1d5206356cfac25290dd4df9e6e8cf2e7021293f58c2b3f8e

    • SSDEEP

      6144:cJnc64DCtD752cycYt4Tl9HSw4T2xmEKhDYfJE9kfIy4jNYoZooqwNgk:cJcdK75tHYt4rj4TCxDfIyUjodk

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks