Overview

overview

10

Static

static

7

Endermanch...is.exe

windows7-x64

7

Endermanch...is.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    CleanThis.zip

  • Size

    577KB

  • Sample

    230830-jry5eaae75

  • MD5

    fcdf496c1869b16e8c4964b28da8af0b

  • SHA1

    b965397f9fc13ec934b1357ef5754af5c212b7f4

  • SHA256

    37a88b905f8ed19e1bd94fd282f575e2cfc58a83e35e922d1a35a0cc42bd61c6

  • SHA512

    1e560fbc9ae022266d7ec80b5b324c53f43501c113789361aa899999b9d98f9e0f167881a02aa2e534695a0ed32fe989cf4bd13f5c17cb8237a3744a0c424938

  • SSDEEP

    12288:G/x5JJd7limAT2WDAww1r/0tjk5arBph/d7jZO2WlbbxBOrwKTyz:GZJimARDAwwF/Ej7pld7H24Tyz

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      [email protected]

    • Size

      618KB

    • MD5

      a50fc0da1d2b3c4aa8a6adaccf69a5de

    • SHA1

      e001f4043ab4be644ea10e0d65303d6e57b31ffe

    • SHA256

      cf6eb8377789e316629c0396a2dbb53c69b5fd67bbd0e7163b8d305aaa756e90

    • SHA512

      4bbc7676391ed4085f628d1f4e1f0af16f5cd6fd9efb8c61176bccdb6ee03b06896c6ddfba9fcf363b133ade3a8a1b8cd17ef92d8eb9adeec247f9bd41dbec2b

    • SSDEEP

      12288:EQIfqOiX9P/aazd1ctyDXHrJW2dGMToCRn5VxWRaqsrOkqgyQD:EQIydX/d1rTLRd/TvVUsrOkqFQD

    Score
    10/10
    upxpersistence

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks