Overview

overview

10

Static

static

10

5d703452cb...28.exe

windows7-x64

9

5d703452cb...28.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d703452cbb25b34284f659ebc4044a921a6b713508de5d0f5f670a692295828

  • Size

    1016KB

  • Sample

    231031-x8s7dach8w

  • MD5

    4547a9f78f96e851942d14449932412f

  • SHA1

    ce572a3e52f705ba4b80437d962abd38a95299f8

  • SHA256

    5d703452cbb25b34284f659ebc4044a921a6b713508de5d0f5f670a692295828

  • SHA512

    d40035747bff48059012e1743338e463e8e77a6584a51001f8716223dad64709be149543b7ee799a12089633ac70689cb145ef077f1f82fbf0e5129237d87501

  • SSDEEP

    24576:mYCFCdoKbl2cVdrAXIwK3+X5TNkdBAnlXG6+Z1mbXaZooW:osbl2cVdrKIX+XXkUlXF+Z1IqZooW

Score
10/10
fabookiepersistenceupx

Malware Config

Targets

    • Target

      5d703452cbb25b34284f659ebc4044a921a6b713508de5d0f5f670a692295828

    • Size

      1016KB

    • MD5

      4547a9f78f96e851942d14449932412f

    • SHA1

      ce572a3e52f705ba4b80437d962abd38a95299f8

    • SHA256

      5d703452cbb25b34284f659ebc4044a921a6b713508de5d0f5f670a692295828

    • SHA512

      d40035747bff48059012e1743338e463e8e77a6584a51001f8716223dad64709be149543b7ee799a12089633ac70689cb145ef077f1f82fbf0e5129237d87501

    • SSDEEP

      24576:mYCFCdoKbl2cVdrAXIwK3+X5TNkdBAnlXG6+Z1mbXaZooW:osbl2cVdrKIX+XXkUlXF+Z1IqZooW

    Score
    9/10
    persistenceupx

    • Nirsoft

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks