Overview

overview

8

Static

static

1

3dcd5dc622...48.exe

windows7-x64

7

3dcd5dc622...48.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3dcd5dc6221c31192edc5577be05319d191b7b3100a36b7d6d0ee8e4a6461948

  • Size

    241KB

  • Sample

    231011-qq9m3sbh75

  • MD5

    9583f8d42583b7f0e8ce9c63b5072c9e

  • SHA1

    e89119e96447b9bea468a0b610b296a04a0fbf93

  • SHA256

    3dcd5dc6221c31192edc5577be05319d191b7b3100a36b7d6d0ee8e4a6461948

  • SHA512

    31f63ea0fa9fa4f889cd3c7fea5b76ad7fd7087e8081effa08e374aa2fc82c392921dcd5b9977637812f6b054c0de5f77db6137c0ebc85fa6807014375a4ccdd

  • SSDEEP

    3072:ZwzvOYRS5YPnH/DvbEvK9aobNI2B+hlsfni3YGByThXKBZkZN4GhQ2eRZh+/bJSV:KSiPn7h9H/B+rwNBV+UdvrEFp7hKvpk

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      3dcd5dc6221c31192edc5577be05319d191b7b3100a36b7d6d0ee8e4a6461948

    • Size

      241KB

    • MD5

      9583f8d42583b7f0e8ce9c63b5072c9e

    • SHA1

      e89119e96447b9bea468a0b610b296a04a0fbf93

    • SHA256

      3dcd5dc6221c31192edc5577be05319d191b7b3100a36b7d6d0ee8e4a6461948

    • SHA512

      31f63ea0fa9fa4f889cd3c7fea5b76ad7fd7087e8081effa08e374aa2fc82c392921dcd5b9977637812f6b054c0de5f77db6137c0ebc85fa6807014375a4ccdd

    • SSDEEP

      3072:ZwzvOYRS5YPnH/DvbEvK9aobNI2B+hlsfni3YGByThXKBZkZN4GhQ2eRZh+/bJSV:KSiPn7h9H/B+rwNBV+UdvrEFp7hKvpk

    Score
    8/10
    upxpersistence

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks