Overview

overview

8

Static

static

3

Default.exe

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Default.exe

  • Size

    19.4MB

  • Sample

    230417-vavansfb79

  • MD5

    2cceac8120b5c246df8080ad7a4dbc11

  • SHA1

    cf1e3d10bf9f89850a590e45d835a6025ceb090b

  • SHA256

    1a4019189c4835b794036f2ac2c63063eadebde1da06c80b9bad9cc72e5ee216

  • SHA512

    d78c6721365a06124a8043b00b37f3aa545fc951744873fdc8aec8b49728512579de93be318049c2c93d415058f6cf6902d13282591b9d2267079bff6916a9dc

  • SSDEEP

    393216:BxAlnc1IquqAQIdSgsitlA1rQQN5q1SDDNW7jl7lZy6oErJ:slc1FuqAaitlA6QNAEkJnvFl

Score
8/10
persistencepyinstallerupx

Malware Config

Targets

    • Target

      Default.exe

    • Size

      19.4MB

    • MD5

      2cceac8120b5c246df8080ad7a4dbc11

    • SHA1

      cf1e3d10bf9f89850a590e45d835a6025ceb090b

    • SHA256

      1a4019189c4835b794036f2ac2c63063eadebde1da06c80b9bad9cc72e5ee216

    • SHA512

      d78c6721365a06124a8043b00b37f3aa545fc951744873fdc8aec8b49728512579de93be318049c2c93d415058f6cf6902d13282591b9d2267079bff6916a9dc

    • SSDEEP

      393216:BxAlnc1IquqAQIdSgsitlA1rQQN5q1SDDNW7jl7lZy6oErJ:slc1FuqAaitlA6QNAEkJnvFl

    Score
    8/10
    persistencepyinstallerupx

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks