Overview

overview

9

Static

static

1

45aa5919fa...8b.exe

windows7-x64

9

45aa5919fa...8b.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    45aa5919fa2251e782d0873fe8b68d2f05ee68d16b9b45d6bf80909334f7748b.exe.zip

  • Size

    70.8MB

  • Sample

    231031-q3lf1sgd5t

  • MD5

    0520b1534b8cb50a134e5bf027830f06

  • SHA1

    c8254cdda218cfc02773364207f8188a13fc4b74

  • SHA256

    77f8fbf27ccd2da661298ff026abb33d68c7f198095a4dd5e71d60a194459add

  • SHA512

    75d1f82218abbd2424672f9c12ac922ed4bba9e72c27c046bae422b01b58cf906b66ba302bb40d100902963f708d6ea52c2e40e76d66c718784d9c5aa9a5e9c2

  • SSDEEP

    1572864:eE7HmxwDAikZXNJ3NE+ir9QnrKtN6uiOEfu1CQl1N4AN4ha:b7wiCN9NEFrOrYTiXtQlH4Aqha

Score
9/10
upx

Malware Config

Targets

    • Target

      45aa5919fa2251e782d0873fe8b68d2f05ee68d16b9b45d6bf80909334f7748b.exe

    • Size

      72.1MB

    • MD5

      61f2713513e12e1f902f577e2bc8339d

    • SHA1

      ef9afdeeb1ff74dc4c18c647874c9f42119a1177

    • SHA256

      45aa5919fa2251e782d0873fe8b68d2f05ee68d16b9b45d6bf80909334f7748b

    • SHA512

      f4a0f7dd7f5e0e5887ef66c79a40420f92a2316a73da238bcf1c40e76807215a8a87c95ffdec285e82514b24c366a5e042afe73d13d0ed169602f42a23c7438a

    • SSDEEP

      1572864:q7Ktcg8plw280qW1DyV6OExmfDhrOk8EwJDLF9Rh:q7Kyg8s2801yV6OExGDhrOkQFjX

    Score
    9/10
    upx

    • Detect jar appended to MSI

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks