Overview

overview

10

Static

static

9c836400db...8a.exe

windows7-x64

8

9c836400db...8a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c836400dba79792e06cd1c3e55c5d4f08c5c08a

  • Size

    413KB

  • Sample

    230110-c1nlpsaa57

  • MD5

    cd938e0947701359b09ce892e15862b3

  • SHA1

    9c836400dba79792e06cd1c3e55c5d4f08c5c08a

  • SHA256

    73554b33d8d8335316da6cc68545370a7afabf5345e3e5635148e2b832809b16

  • SHA512

    1a75d287f96763b7c0e9868c7488d3dd006b8f6ffb0e878ab9338f8d556ad2cb6b4a82c7283ae8c8ac68a3ea4073d5386239f478ba221228e5e8ab6e61abc887

  • SSDEEP

    6144:F7/7Wn2iBqScSkltGne4D64jdMcmR5HYfEsq4DKxZtmCmUbLZOTvoU:F7TykFILjdbmR54csq4DK/tOTwU

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      9c836400dba79792e06cd1c3e55c5d4f08c5c08a

    • Size

      413KB

    • MD5

      cd938e0947701359b09ce892e15862b3

    • SHA1

      9c836400dba79792e06cd1c3e55c5d4f08c5c08a

    • SHA256

      73554b33d8d8335316da6cc68545370a7afabf5345e3e5635148e2b832809b16

    • SHA512

      1a75d287f96763b7c0e9868c7488d3dd006b8f6ffb0e878ab9338f8d556ad2cb6b4a82c7283ae8c8ac68a3ea4073d5386239f478ba221228e5e8ab6e61abc887

    • SSDEEP

      6144:F7/7Wn2iBqScSkltGne4D64jdMcmR5HYfEsq4DKxZtmCmUbLZOTvoU:F7TykFILjdbmR54csq4DK/tOTwU

    Score
    10/10
    upxevasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies security service

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks