Overview

overview

8

Static

static

1

8515d67111...JC.exe

windows7-x64

8

8515d67111...JC.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8515d6711178ccf6716b13a7d2bf7b6c_floxif_mafia_JC.exe

  • Size

    2.7MB

  • Sample

    230824-vlkwdaea98

  • MD5

    8515d6711178ccf6716b13a7d2bf7b6c

  • SHA1

    3074656887c4c4a707a67af985dca76f33524620

  • SHA256

    afd54cb9d4092f1307fb2bc34a83086dfd7ed15ebb5ef987a21430e42651f8af

  • SHA512

    9d47864a3451877c0fc4de6582de4a72e7bce13bce1a0a0e0439fbbb65a01d3c3901d0ca98691ed48dcd43e5811d9a5c5f896f0d13f72a24c2f98aa7f138c916

  • SSDEEP

    49152:zPE6vXDUOYQMqclLy0wsXuhXabboP4ACQDAxnmCwlzI8ndeyw+AZ/WY4N2WwW/Kg:LFvXfMFLySXuhXa/oP4ACYAxnmCMIdy7

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      8515d6711178ccf6716b13a7d2bf7b6c_floxif_mafia_JC.exe

    • Size

      2.7MB

    • MD5

      8515d6711178ccf6716b13a7d2bf7b6c

    • SHA1

      3074656887c4c4a707a67af985dca76f33524620

    • SHA256

      afd54cb9d4092f1307fb2bc34a83086dfd7ed15ebb5ef987a21430e42651f8af

    • SHA512

      9d47864a3451877c0fc4de6582de4a72e7bce13bce1a0a0e0439fbbb65a01d3c3901d0ca98691ed48dcd43e5811d9a5c5f896f0d13f72a24c2f98aa7f138c916

    • SSDEEP

      49152:zPE6vXDUOYQMqclLy0wsXuhXabboP4ACQDAxnmCwlzI8ndeyw+AZ/WY4N2WwW/Kg:LFvXfMFLySXuhXa/oP4ACYAxnmCMIdy7

    Score
    8/10
    persistenceupx

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks