Overview

overview

7

Static

static

7

HTTP-16893...Rb.exe

windows7-x64

7

HTTP-16893...Rb.exe

windows10-2004-x64

7

out.exe

windows7-x64

out.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HTTP-1689370168.058901-4dce9a0afd4a43f7a21896f50aa2b442-FYJEDU30ND5QrglURb.exe

  • Size

    1.3MB

  • Sample

    230716-zv3j1agg22

  • MD5

    4dce9a0afd4a43f7a21896f50aa2b442

  • SHA1

    f915dad6ebd4276518f7d962619a3c4612b76be0

  • SHA256

    e939a53fe11b0d32d9ee617f92d48fc4b409516d5c5ecfe4599a6c64d7fb1241

  • SHA512

    daf5a5e4b0601f8f0b29f8292b659be41a79d7045fe0b9ffa8b71df966aac01ef5d29bcec2be4aee233926976f8708f6bb86f4639e4ee08368ac9909bfac7290

  • SSDEEP

    24576:lDlfF9pRxwExoc7pZtSDBPNqig4ON4+xJX7YRk:nFDRx7V7pEPHpON4qJX7V

Score
7/10
upx

Malware Config

Targets

    • Target

      HTTP-1689370168.058901-4dce9a0afd4a43f7a21896f50aa2b442-FYJEDU30ND5QrglURb.exe

    • Size

      1.3MB

    • MD5

      4dce9a0afd4a43f7a21896f50aa2b442

    • SHA1

      f915dad6ebd4276518f7d962619a3c4612b76be0

    • SHA256

      e939a53fe11b0d32d9ee617f92d48fc4b409516d5c5ecfe4599a6c64d7fb1241

    • SHA512

      daf5a5e4b0601f8f0b29f8292b659be41a79d7045fe0b9ffa8b71df966aac01ef5d29bcec2be4aee233926976f8708f6bb86f4639e4ee08368ac9909bfac7290

    • SSDEEP

      24576:lDlfF9pRxwExoc7pZtSDBPNqig4ON4+xJX7YRk:nFDRx7V7pEPHpON4qJX7V

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      out.upx

    • Size

      3.7MB

    • MD5

      611b099f7788851112da905a7f14c882

    • SHA1

      415e8d6dc881c3f675686c908772d78d7d73736b

    • SHA256

      4a7535baf95c587dd4b84c93fd2dcc5df41062d3c0c1b2bdbd4e50ce1a995a9b

    • SHA512

      aa5427d2d5db1c1aa64f7e5b1639a6f3a778a7249e56b1d4c1f0cc6d4087d385dbf8f3b4d90a72e50ba9e62e94d8caa8dbb52dc195a20adb9ec43bb8af26a277

    • SSDEEP

      98304:Xsus2VprlOUyWFtxhJefcUX/hZwczQcHBAhT:Xs58tJUMeBAhT

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v6

Tasks