Overview

overview

7

Static

static

7

177e618f1d...3f.exe

windows7-x64

7

177e618f1d...3f.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    177e618f1da0ae24c283229d8a145e3f

  • Size

    204KB

  • Sample

    231225-mlsxzsgaf3

  • MD5

    177e618f1da0ae24c283229d8a145e3f

  • SHA1

    86e14ac9cb5b5a071893b6a6f69754968cbae7d0

  • SHA256

    25eaee138ea5daa22159b2536e4bd2c313351e424113ee8b045e0f1042398913

  • SHA512

    5949341a77aea50a8d39a9724deae64ee5be7f576fb08ca9ed58c2572bffcb254681cd953cbc853dced30f3361e93fd204efcdfec03f0c946613d55cdd069b5d

  • SSDEEP

    6144:OS/ryv8VsRKPe/AaOEStScBxxe1mBDzr3E:t/rC8VSQHBO1u/r3E

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      177e618f1da0ae24c283229d8a145e3f

    • Size

      204KB

    • MD5

      177e618f1da0ae24c283229d8a145e3f

    • SHA1

      86e14ac9cb5b5a071893b6a6f69754968cbae7d0

    • SHA256

      25eaee138ea5daa22159b2536e4bd2c313351e424113ee8b045e0f1042398913

    • SHA512

      5949341a77aea50a8d39a9724deae64ee5be7f576fb08ca9ed58c2572bffcb254681cd953cbc853dced30f3361e93fd204efcdfec03f0c946613d55cdd069b5d

    • SSDEEP

      6144:OS/ryv8VsRKPe/AaOEStScBxxe1mBDzr3E:t/rC8VSQHBO1u/r3E

    Score
    7/10
    persistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks