Overview

overview

7

Static

static

7

psiphon-18...13.exe

windows7-x64

7

psiphon-18...13.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    psiphon-180-20231113.exe

  • Size

    7.5MB

  • Sample

    231114-m933vsbh5y

  • MD5

    041735c8a43cb3a5719082c1ec6f0af4

  • SHA1

    ebd3d95549fd8585c8887a372120d0992b2bbafe

  • SHA256

    e0deec563c3e9b2630344cd527c2147feb2e0b4044290ca8b8f715fd558fa902

  • SHA512

    c2470321cf079af4a5cef235be53c20256bf2d2e93a2d54f2e4914bc5580fb75f3eccd02212855c5c3881e7450a998137debdc749b0e16ce68a6aedb6e568b44

  • SSDEEP

    98304:mbwNWY0RVOBuGtcqa3jQZoFtwN+ovR9siyiP+jQnXfiOtT8HsidjpfUmnJ4HNO9:mbC++4qa3jQZoF9S9HycnPR0pf0ti

Score
7/10
upx

Malware Config

Targets

    • Target

      psiphon-180-20231113.exe

    • Size

      7.5MB

    • MD5

      041735c8a43cb3a5719082c1ec6f0af4

    • SHA1

      ebd3d95549fd8585c8887a372120d0992b2bbafe

    • SHA256

      e0deec563c3e9b2630344cd527c2147feb2e0b4044290ca8b8f715fd558fa902

    • SHA512

      c2470321cf079af4a5cef235be53c20256bf2d2e93a2d54f2e4914bc5580fb75f3eccd02212855c5c3881e7450a998137debdc749b0e16ce68a6aedb6e568b44

    • SSDEEP

      98304:mbwNWY0RVOBuGtcqa3jQZoFtwN+ovR9siyiP+jQnXfiOtT8HsidjpfUmnJ4HNO9:mbC++4qa3jQZoF9S9HycnPR0pf0ti

    Score
    7/10
    upx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks