Overview

overview

7

Static

static

7

1bc7332bef...04.exe

windows7-x64

7

1bc7332bef...04.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1bc7332befc5f8122abf9b3261635f04

  • Size

    1.0MB

  • Sample

    231225-nw8lvsgda6

  • MD5

    1bc7332befc5f8122abf9b3261635f04

  • SHA1

    5bad8acdf7c0c7f24f0574a90de215890248d012

  • SHA256

    21ad87e65bcc5584f1a7fa50325ca68f999227d7ccdc9197382133635753a7f9

  • SHA512

    41600ab933c625f401d72c19e9db64a426c069a8b866545390351ab5a443a3d5ffaf26cb46edd572e5fa0ed3399c466d878a8f190b6267e0135ba846b4e28dbe

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjrkc:r5sJo6YrFUiyAak11Ltjrkc

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      1bc7332befc5f8122abf9b3261635f04

    • Size

      1.0MB

    • MD5

      1bc7332befc5f8122abf9b3261635f04

    • SHA1

      5bad8acdf7c0c7f24f0574a90de215890248d012

    • SHA256

      21ad87e65bcc5584f1a7fa50325ca68f999227d7ccdc9197382133635753a7f9

    • SHA512

      41600ab933c625f401d72c19e9db64a426c069a8b866545390351ab5a443a3d5ffaf26cb46edd572e5fa0ed3399c466d878a8f190b6267e0135ba846b4e28dbe

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjrkc:r5sJo6YrFUiyAak11Ltjrkc

    Score
    7/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks