Overview

overview

10

Static

static

7

demo.rar

windows7-x64

10

demo.rar

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    demo.rar

  • Size

    9.3MB

  • Sample

    231112-msnlvafe88

  • MD5

    11a29caefed10a030cf21ffab7766be0

  • SHA1

    dea9f7155ea31135b6fef278bad7df126a80ef05

  • SHA256

    77ac0d10569438aa7519e659e8d6e471924871b54a68f2c515b6e17f874c4b87

  • SHA512

    7b5dd63521248c3ff8bc4a0fb1fdb1ea17f6750a11b3c6aa4100a8e4ecf6bf4f141d31e41e2c4b39693ea83da71ed2e9fd54c36dbec0881441bdb3d6a3d0fba6

  • SSDEEP

    196608:P+pykpNDsfBodsCQk+pykpNDsfBodsCQdagg6gcNNGy1faagg6gcNNGy1fX:W8kp1ipv8kp1ip86gcOy56gcOyx

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      demo.rar

    • Size

      9.3MB

    • MD5

      11a29caefed10a030cf21ffab7766be0

    • SHA1

      dea9f7155ea31135b6fef278bad7df126a80ef05

    • SHA256

      77ac0d10569438aa7519e659e8d6e471924871b54a68f2c515b6e17f874c4b87

    • SHA512

      7b5dd63521248c3ff8bc4a0fb1fdb1ea17f6750a11b3c6aa4100a8e4ecf6bf4f141d31e41e2c4b39693ea83da71ed2e9fd54c36dbec0881441bdb3d6a3d0fba6

    • SSDEEP

      196608:P+pykpNDsfBodsCQk+pykpNDsfBodsCQdagg6gcNNGy1faagg6gcNNGy1fX:W8kp1ipv8kp1ip86gcOy56gcOyx

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks