Overview

overview

7

Static

static

7

gry.exe

windows7-x64

7

gry.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    gry.exe

  • Size

    989KB

  • Sample

    231117-fb8r5afb32

  • MD5

    8a5311cd91c99c7c9e3c4074bad2ce24

  • SHA1

    bcd16d0fa152ba6c949d71c449fb7f04499ed974

  • SHA256

    e9e2ed140683ba8f499d3c79cc0737f6ef8533867749c0bd6a78fd61c2d4d7f7

  • SHA512

    1ac7ed75b3f250d6e2c8e35b006066a0cb7abe7d3dfec476139aefd0ee8fd06a20fc52efb794266bc9973d74366f10f8d05bf10fd852af77748292fa54802bb7

  • SSDEEP

    12288:nXe9PPlowWX0t6mOQwg1Qd15CcYk0We1RS+S1M9UYOIRIpk+TrJX8lSHxxssefa:OhloDX0XOf47W1o6RR6Va

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      gry.exe

    • Size

      989KB

    • MD5

      8a5311cd91c99c7c9e3c4074bad2ce24

    • SHA1

      bcd16d0fa152ba6c949d71c449fb7f04499ed974

    • SHA256

      e9e2ed140683ba8f499d3c79cc0737f6ef8533867749c0bd6a78fd61c2d4d7f7

    • SHA512

      1ac7ed75b3f250d6e2c8e35b006066a0cb7abe7d3dfec476139aefd0ee8fd06a20fc52efb794266bc9973d74366f10f8d05bf10fd852af77748292fa54802bb7

    • SSDEEP

      12288:nXe9PPlowWX0t6mOQwg1Qd15CcYk0We1RS+S1M9UYOIRIpk+TrJX8lSHxxssefa:OhloDX0XOf47W1o6RR6Va

    Score
    7/10
    persistenceupx

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks