Overview

overview

7

Static

static

7

rufus-3.21.exe

windows7-x64

7

rufus-3.21.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rufus-3.21.exe

  • Size

    1.3MB

  • Sample

    230328-rrnbxabe62

  • MD5

    c2ab67a2561ac7f5add3256fe9bf85d4

  • SHA1

    cc5742d1f128c439740a56734c0e105f11a62fe6

  • SHA256

    d0554f1fc47407d678a4d8eace607272013c475033b636bfb1824ed6b1a22e36

  • SHA512

    936ffc79313ebd47ad41f13c5e922d77f4d58c43f0c4df3daf3caff06bf8ca0cb2586c63c685b1c60ffe9d24ce1815ea2fe02d09e4618ba7cef897dffaa01467

  • SSDEEP

    24576:3sqLY/SQe/JGy8U6epCdC4B4K8cvKBUlrVI3r+B4lz/i/ywNRhjSFOA:jYARGyLmCq4VciKlr2b+EjmzSN

Score
7/10
evasiontrojanupx

Malware Config

Targets

    • Target

      rufus-3.21.exe

    • Size

      1.3MB

    • MD5

      c2ab67a2561ac7f5add3256fe9bf85d4

    • SHA1

      cc5742d1f128c439740a56734c0e105f11a62fe6

    • SHA256

      d0554f1fc47407d678a4d8eace607272013c475033b636bfb1824ed6b1a22e36

    • SHA512

      936ffc79313ebd47ad41f13c5e922d77f4d58c43f0c4df3daf3caff06bf8ca0cb2586c63c685b1c60ffe9d24ce1815ea2fe02d09e4618ba7cef897dffaa01467

    • SSDEEP

      24576:3sqLY/SQe/JGy8U6epCdC4B4K8cvKBUlrVI3r+B4lz/i/ywNRhjSFOA:jYARGyLmCq4VciKlr2b+EjmzSN

    Score
    7/10
    evasiontrojanupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks