Overview

overview

8

Static

static

3

536b2d1a47...99.exe

windows7-x64

8

536b2d1a47...99.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    536b2d1a47e042b2dbd970f02cdcd3e0e560c91f1d33bd73f97da816fbf2d999

  • Size

    192KB

  • Sample

    231013-x57wcsdg8x

  • MD5

    8e04a7beb39f90e6c49abbfbf073c347

  • SHA1

    541abcb8a631f06573273f62ed50a70f64ca3e1c

  • SHA256

    536b2d1a47e042b2dbd970f02cdcd3e0e560c91f1d33bd73f97da816fbf2d999

  • SHA512

    9761a1c6899f121b6c011801b64796756dc99e203516f67d35a60c051e1c0a2483372b95abea09b7aea30dd9d3f098751ee8ebc72a282220bf92b6269d7d1e31

  • SSDEEP

    3072:I7m3YSADpySojzNJJul8ohUJ2lQBV+UdE+rECWp7hKEiV:I4Lm0tehaBV+UdvrEFp7hKES

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      536b2d1a47e042b2dbd970f02cdcd3e0e560c91f1d33bd73f97da816fbf2d999

    • Size

      192KB

    • MD5

      8e04a7beb39f90e6c49abbfbf073c347

    • SHA1

      541abcb8a631f06573273f62ed50a70f64ca3e1c

    • SHA256

      536b2d1a47e042b2dbd970f02cdcd3e0e560c91f1d33bd73f97da816fbf2d999

    • SHA512

      9761a1c6899f121b6c011801b64796756dc99e203516f67d35a60c051e1c0a2483372b95abea09b7aea30dd9d3f098751ee8ebc72a282220bf92b6269d7d1e31

    • SSDEEP

      3072:I7m3YSADpySojzNJJul8ohUJ2lQBV+UdE+rECWp7hKEiV:I4Lm0tehaBV+UdvrEFp7hKES

    Score
    8/10
    persistenceupx

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks