Overview

overview

8

Static

static

1

cb3a5020dd...c7.exe

windows7-x64

8

cb3a5020dd...c7.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    cb3a5020dd3d7618adeb45a95f46841c79ea3103e9f7f3d0ee1da88fc722e3c7

  • Size

    243KB

  • Sample

    231116-s6r43scg67

  • MD5

    78397f8b1560d0f961cf869c6c5b1f9b

  • SHA1

    ebda7041203412d7563371d6a13c07d5fe759a28

  • SHA256

    cb3a5020dd3d7618adeb45a95f46841c79ea3103e9f7f3d0ee1da88fc722e3c7

  • SHA512

    198df5f10a00c7e963c6905d74775928a21e461af4e9e2cbd363e111a09806dbd50e2b0957a3d30f0f6067408d07662db309e494f6a66949f79ef32f9b92b051

  • SSDEEP

    6144:14SP/aK2h9H/B+3ChmBV+UdvrEFp7hKhISt/:14SP/aK2vB+yYBjvrEH7EIm

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      cb3a5020dd3d7618adeb45a95f46841c79ea3103e9f7f3d0ee1da88fc722e3c7

    • Size

      243KB

    • MD5

      78397f8b1560d0f961cf869c6c5b1f9b

    • SHA1

      ebda7041203412d7563371d6a13c07d5fe759a28

    • SHA256

      cb3a5020dd3d7618adeb45a95f46841c79ea3103e9f7f3d0ee1da88fc722e3c7

    • SHA512

      198df5f10a00c7e963c6905d74775928a21e461af4e9e2cbd363e111a09806dbd50e2b0957a3d30f0f6067408d07662db309e494f6a66949f79ef32f9b92b051

    • SSDEEP

      6144:14SP/aK2h9H/B+3ChmBV+UdvrEFp7hKhISt/:14SP/aK2vB+yYBjvrEH7EIm

    Score
    8/10
    persistenceupx

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks