Overview

overview

8

Static

static

c88113722a...6d.exe

windows7-x64

8

c88113722a...6d.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    c88113722a49d84d9fed5e397459ab6d.exe

  • Size

    552KB

  • Sample

    221228-y4f7pabe35

  • MD5

    c88113722a49d84d9fed5e397459ab6d

  • SHA1

    17d450dd4566a3c687402508db54a6a629477c91

  • SHA256

    8e35b5b98aed8865cf0d19f56d458415ddb62112d88802d8d0cdee9bf88aa7f5

  • SHA512

    c72c5321343446102bb6b51d0af4c3d469f368bda03ce1781b0b31d270aed26b767eb0e570c0d949939f8737d8240bd0cecb959e14a2b9ecf363d232f8f66cf8

  • SSDEEP

    12288:cBXK0E4gwgi/bCCws1lt2hN/JPlCon1b+:c2o/bC70lt2hTso1

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      c88113722a49d84d9fed5e397459ab6d.exe

    • Size

      552KB

    • MD5

      c88113722a49d84d9fed5e397459ab6d

    • SHA1

      17d450dd4566a3c687402508db54a6a629477c91

    • SHA256

      8e35b5b98aed8865cf0d19f56d458415ddb62112d88802d8d0cdee9bf88aa7f5

    • SHA512

      c72c5321343446102bb6b51d0af4c3d469f368bda03ce1781b0b31d270aed26b767eb0e570c0d949939f8737d8240bd0cecb959e14a2b9ecf363d232f8f66cf8

    • SSDEEP

      12288:cBXK0E4gwgi/bCCws1lt2hN/JPlCon1b+:c2o/bC70lt2hTso1

    Score
    8/10
    persistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks