Overview

overview

10

Static

static

1

0d5cd0cb28...76.exe

windows7-x64

10

0d5cd0cb28...76.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d5cd0cb28a6da2bf6c2de5166ee9d76

  • Size

    391KB

  • Sample

    231230-ea1jpaefak

  • MD5

    0d5cd0cb28a6da2bf6c2de5166ee9d76

  • SHA1

    f7008a4c1ac1b27590ee56655c18f6f3f1fc1ff2

  • SHA256

    8fcd842d46ad70bf72148e7a5d9d587566f91164279f32ae78670199e980a5e3

  • SHA512

    2016e5f87aa76d5aa4dedb08b10d7f3b4522612871c692697a858392d3343cb4132b8fc2f38bf78871f2f48ff032502d0aa07eb059f3ea11459277bac4c8058e

  • SSDEEP

    6144:lqq1+wa/QKgZ+K1J/4Thmd3Wc11KxEpBnXLz+k4O7Cp/LJz8Eb:YkkQKgD1uThmdmU1KxEpRLyw7et4Eb

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      0d5cd0cb28a6da2bf6c2de5166ee9d76

    • Size

      391KB

    • MD5

      0d5cd0cb28a6da2bf6c2de5166ee9d76

    • SHA1

      f7008a4c1ac1b27590ee56655c18f6f3f1fc1ff2

    • SHA256

      8fcd842d46ad70bf72148e7a5d9d587566f91164279f32ae78670199e980a5e3

    • SHA512

      2016e5f87aa76d5aa4dedb08b10d7f3b4522612871c692697a858392d3343cb4132b8fc2f38bf78871f2f48ff032502d0aa07eb059f3ea11459277bac4c8058e

    • SSDEEP

      6144:lqq1+wa/QKgZ+K1J/4Thmd3Wc11KxEpBnXLz+k4O7Cp/LJz8Eb:YkkQKgD1uThmdmU1KxEpRLyw7et4Eb

    Score
    10/10
    evasionpersistenceupx

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks