Overview

overview

8

Static

static

7

9d4d5e5ae2...87.exe

windows7-x64

7

9d4d5e5ae2...87.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9d4d5e5ae2bc63a3831dd21a92d75577ee732048b44494e8c2b06882e0123187

  • Size

    3.2MB

  • Sample

    230816-ex3ybsfc52

  • MD5

    f4459561d7692d509942012f66de97db

  • SHA1

    566974964db4337b787872d808816f142d0af4e5

  • SHA256

    9d4d5e5ae2bc63a3831dd21a92d75577ee732048b44494e8c2b06882e0123187

  • SHA512

    76d288be2d873f72187cffa6def8f50faef09dd55c1511ac9dab34bde74ff760be231f59967f6a314c9d811a743e78504c97a4af3d15c3e370dc00f20be34434

  • SSDEEP

    49152:/WIj/cs0FX0oGsWB9zKK6la61RAuWFUKAdtv8lZOpgSHZJSgLmcvC:5QbXWB9zKK6lBuu6UKgE8pgSPRaQC

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      9d4d5e5ae2bc63a3831dd21a92d75577ee732048b44494e8c2b06882e0123187

    • Size

      3.2MB

    • MD5

      f4459561d7692d509942012f66de97db

    • SHA1

      566974964db4337b787872d808816f142d0af4e5

    • SHA256

      9d4d5e5ae2bc63a3831dd21a92d75577ee732048b44494e8c2b06882e0123187

    • SHA512

      76d288be2d873f72187cffa6def8f50faef09dd55c1511ac9dab34bde74ff760be231f59967f6a314c9d811a743e78504c97a4af3d15c3e370dc00f20be34434

    • SSDEEP

      49152:/WIj/cs0FX0oGsWB9zKK6la61RAuWFUKAdtv8lZOpgSHZJSgLmcvC:5QbXWB9zKK6lBuu6UKgE8pgSPRaQC

    Score
    8/10
    upxpersistence

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks