Overview

overview

8

Static

static

1

$RWL56V2.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    3321b8ee0cafe7d336a93913c455bebbb821622c011ce10a9198a49392a3bb66.zip

  • Size

    798KB

  • Sample

    230802-vb2q5sgh9v

  • MD5

    0c8d0253d4b37332970f6b1596df6dd2

  • SHA1

    f00c90706f826990b1e056fc2d879a8b900124be

  • SHA256

    d991264feeb97e63cb4774aae4b5471f41e26574ba416f298a1413c048dff4bb

  • SHA512

    6821ad9b0ad98fc56db27d83f4975d9fa279b11407212cacd1747034d885712fb13de4093f037ecf55ac963b5ede7553965c0875b308be7f0d88f53dd170ca61

  • SSDEEP

    24576:SCQwamxnFDtQRK8F0C7vZmIwzvVLzeitDft1:owXFDtQh7vUIwDHtJ1

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      $RWL56V2.exe

    • Size

      829KB

    • MD5

      ed249eeca5364b32391801ec5c2d9a33

    • SHA1

      c2ff4af1e6a3dee3e8e2eed5ebd2bed216423384

    • SHA256

      3321b8ee0cafe7d336a93913c455bebbb821622c011ce10a9198a49392a3bb66

    • SHA512

      36bd4b744d7b9553247e02fd1349e500701bf800e1e77b0389186a4cd7dc5fd818e8de222323ab647238b04023f35ea98f0a5b30544373f3eaec670cfd4e3b16

    • SSDEEP

      24576:653l9O0nJzu8bw5fM3/FIamqPG8xzY6CkQ+aNh1Rce:yE3iFmO53CfTRl

    Score
    8/10
    persistenceupx

    • Downloads MZ/PE file

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks