Overview

overview

9

Static

static

7

e6354ae0b5...d6.exe

windows7-x64

9

e6354ae0b5...d6.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e6354ae0b5be2a9c0d883d560e7756d6

  • Size

    1.4MB

  • Sample

    231228-sntj7acde5

  • MD5

    e6354ae0b5be2a9c0d883d560e7756d6

  • SHA1

    4aa226591a22c2991370663346205e0106ae19a9

  • SHA256

    db71afc74e7b156796bfdf79ac0402be47cb873d0c86e34ee430f3e2a398ee17

  • SHA512

    685e968eaa4af9e29469c9ece517d6be85b8f94372b7d98047564ad68b94b9cdf18f5d599ec338772afab1d24695c6630667f808a2c0b4937f8bf8b3acec4a5d

  • SSDEEP

    24576:I6yJMY9UFoRDhkeYM1jJR97zUbia9JVe0hs5WfBiERJchVML1bT6Ef:nY9UORVOM1jJHzaiape0hsABFRJch6Lz

Score
9/10
rezer0upx

Malware Config

Targets

    • Target

      e6354ae0b5be2a9c0d883d560e7756d6

    • Size

      1.4MB

    • MD5

      e6354ae0b5be2a9c0d883d560e7756d6

    • SHA1

      4aa226591a22c2991370663346205e0106ae19a9

    • SHA256

      db71afc74e7b156796bfdf79ac0402be47cb873d0c86e34ee430f3e2a398ee17

    • SHA512

      685e968eaa4af9e29469c9ece517d6be85b8f94372b7d98047564ad68b94b9cdf18f5d599ec338772afab1d24695c6630667f808a2c0b4937f8bf8b3acec4a5d

    • SSDEEP

      24576:I6yJMY9UFoRDhkeYM1jJR97zUbia9JVe0hs5WfBiERJchVML1bT6Ef:nY9UORVOM1jJHzaiape0hsABFRJch6Lz

    Score
    9/10
    rezer0upx

    • ReZer0 packer

      Detects ReZer0, a packer with multiple versions used in various campaigns.

      rezer0

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scripting

1
T1064

Scheduled Task/Job

1
T1053

Persistence

Scheduled Task/Job

1
T1053

Privilege Escalation

Scheduled Task/Job

1
T1053

Defense Evasion

Scripting

1
T1064

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks