Overview

overview

8

Static

static

7

easyMalici...c4.exe

windows7-x64

8

easyMalici...c4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    easyMalicious34b236a3d6c4.exe

  • Size

    62KB

  • Sample

    230704-ytvmbsab3x

  • MD5

    bcf3eda24f0bc87a63995bed41951dc6

  • SHA1

    cd0bd4e3e269eaa6ac15dcccad79f2e533942714

  • SHA256

    bbb73012865ce06afe147d0194c09194134e75c7a53b7e49291893b4b9e6b44b

  • SHA512

    250db34b67bb189cec32d1a569486f1d6e7cc8f216a4a7c3c3c6fdb3eec13709ee4596498c0a7d94acd92be5810eea55ba1f303cd2bc3a6c583ccb3951b34803

  • SSDEEP

    1536:RRkDnTSWukyxHE+JBWC7KnI4KTwTPGsvvk3:KnT6kyxdL9L0bGd3

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      easyMalicious34b236a3d6c4.exe

    • Size

      62KB

    • MD5

      bcf3eda24f0bc87a63995bed41951dc6

    • SHA1

      cd0bd4e3e269eaa6ac15dcccad79f2e533942714

    • SHA256

      bbb73012865ce06afe147d0194c09194134e75c7a53b7e49291893b4b9e6b44b

    • SHA512

      250db34b67bb189cec32d1a569486f1d6e7cc8f216a4a7c3c3c6fdb3eec13709ee4596498c0a7d94acd92be5810eea55ba1f303cd2bc3a6c583ccb3951b34803

    • SSDEEP

      1536:RRkDnTSWukyxHE+JBWC7KnI4KTwTPGsvvk3:KnT6kyxdL9L0bGd3

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks