Overview

overview

8

Static

static

7

88a3e2e606...46.exe

windows7-x64

8

88a3e2e606...46.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    88a3e2e60625dcdcde0a3b4527616ab9bb7bfc81cd8c5c9fc64ee14d7a20c046

  • Size

    274KB

  • Sample

    230828-e4mjxshe9v

  • MD5

    0da0e52c13394de337866456af188b61

  • SHA1

    e271f9d3be2fbb0d53b19a8f2b13b1566233972f

  • SHA256

    88a3e2e60625dcdcde0a3b4527616ab9bb7bfc81cd8c5c9fc64ee14d7a20c046

  • SHA512

    76c894446fc572144b91aca2fa30f0c9b4bf7b214cb80170273c2529f4f074b78e1322c6bdb5c397a47354359fceae154b15fd07dfbb1ab7605a1c95fb525b73

  • SSDEEP

    6144:GbTirrfykiiUjh6QH/cEOkCybEaQRXr9HNdvOa:GPcrfR6ZnOkx2LIa

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      88a3e2e60625dcdcde0a3b4527616ab9bb7bfc81cd8c5c9fc64ee14d7a20c046

    • Size

      274KB

    • MD5

      0da0e52c13394de337866456af188b61

    • SHA1

      e271f9d3be2fbb0d53b19a8f2b13b1566233972f

    • SHA256

      88a3e2e60625dcdcde0a3b4527616ab9bb7bfc81cd8c5c9fc64ee14d7a20c046

    • SHA512

      76c894446fc572144b91aca2fa30f0c9b4bf7b214cb80170273c2529f4f074b78e1322c6bdb5c397a47354359fceae154b15fd07dfbb1ab7605a1c95fb525b73

    • SSDEEP

      6144:GbTirrfykiiUjh6QH/cEOkCybEaQRXr9HNdvOa:GPcrfR6ZnOkx2LIa

    Score
    8/10
    upxvmprotect

    • Drops file in Drivers directory

    • Deletes itself

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks