Overview

overview

9

Static

static

3

1b1b70e00c...e6.exe

windows7-x64

9

1b1b70e00c...e6.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b1b70e00ce2e8d0bcb54a66ddf3d4e6

  • Size

    3.2MB

  • Sample

    231224-3y1flafgbj

  • MD5

    1b1b70e00ce2e8d0bcb54a66ddf3d4e6

  • SHA1

    43bd2fda5a103f6123e59034f92891c8615d4a17

  • SHA256

    13897134d44f811e575e4111ebe5ce3f73cefffaedafa4c0bb6b6916ff86d61e

  • SHA512

    a081d385e4ecdde5bb933193663f91f227e303166a83e07eb8c6ed4bb51ddb8dfc4f1ec4c49679a5226572986957f7d9399663b6292a70f0a6ca69b7f41399f9

  • SSDEEP

    49152:bCZF6uPiRpurkNy9HPCcLjx+BxdEQhsBH6WPTnfBNQ0wqjJdLcs5kSOTX7iGY6:uZFZPTrPC86dEvPNxwIJZf+7iGL

Score
9/10
evasionupx

Malware Config

Targets

    • Target

      1b1b70e00ce2e8d0bcb54a66ddf3d4e6

    • Size

      3.2MB

    • MD5

      1b1b70e00ce2e8d0bcb54a66ddf3d4e6

    • SHA1

      43bd2fda5a103f6123e59034f92891c8615d4a17

    • SHA256

      13897134d44f811e575e4111ebe5ce3f73cefffaedafa4c0bb6b6916ff86d61e

    • SHA512

      a081d385e4ecdde5bb933193663f91f227e303166a83e07eb8c6ed4bb51ddb8dfc4f1ec4c49679a5226572986957f7d9399663b6292a70f0a6ca69b7f41399f9

    • SSDEEP

      49152:bCZF6uPiRpurkNy9HPCcLjx+BxdEQhsBH6WPTnfBNQ0wqjJdLcs5kSOTX7iGY6:uZFZPTrPC86dEvPNxwIJZf+7iGL

    Score
    9/10
    evasionupx

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks