General

  • Target

    内容.exe

  • Size

    6.8MB

  • Sample

    231106-j59hasaa2y

  • MD5

    caa9b129e72f3640f3c8423a8d6d771e

  • SHA1

    121353458c22ce554290273983a5a9f39a31e709

  • SHA256

    5171f4290490c8eb1356519a03533ca5c60de4eb1d52c0607d89147a913df8b5

  • SHA512

    906ba7f8daf53d3cf619d2c5f967c4e2876bcd474d4393e449221b09938a86a5a9047d2bafa9f0c9037b06d11f6d2b5e1e40e5ca8a4c1e118dbaac19cb63b060

  • SSDEEP

    98304:OJGYMihmZizqPoneOg3mUkj91+swfNDtGY:wEwneH3mWptGY

Score
8/10
upx

Malware Config

Targets

    • Target

      内容.exe

    • Size

      6.8MB

    • MD5

      caa9b129e72f3640f3c8423a8d6d771e

    • SHA1

      121353458c22ce554290273983a5a9f39a31e709

    • SHA256

      5171f4290490c8eb1356519a03533ca5c60de4eb1d52c0607d89147a913df8b5

    • SHA512

      906ba7f8daf53d3cf619d2c5f967c4e2876bcd474d4393e449221b09938a86a5a9047d2bafa9f0c9037b06d11f6d2b5e1e40e5ca8a4c1e118dbaac19cb63b060

    • SSDEEP

      98304:OJGYMihmZizqPoneOg3mUkj91+swfNDtGY:wEwneH3mWptGY

    Score
    8/10
    • Modifies RDP port number used by Windows

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks