Overview

overview

7

Static

static

7

124a65d16c...10.exe

windows7-x64

7

124a65d16c...10.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    124a65d16c0f48ef7b94afd838415a10

  • Size

    902KB

  • Sample

    231230-jev7zscagm

  • MD5

    124a65d16c0f48ef7b94afd838415a10

  • SHA1

    06771a4b250cff1e1ab5538fcc93855e24a6a0b5

  • SHA256

    22e5cba437553f13f7404f76e2f9473ab8cedde95b8e42ef9a3f2792ec4d7f32

  • SHA512

    c20a8a5a7cca0fad294c6aa4ccbe95c87b3c42ac13045d3cbfc26f3aa31bb4cc7d75978ef5d5481348e088c5373924a12dce9540376f4650c636ed5e99524ed0

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjm:r5sJo6YrFUiyAak11Ltjm

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      124a65d16c0f48ef7b94afd838415a10

    • Size

      902KB

    • MD5

      124a65d16c0f48ef7b94afd838415a10

    • SHA1

      06771a4b250cff1e1ab5538fcc93855e24a6a0b5

    • SHA256

      22e5cba437553f13f7404f76e2f9473ab8cedde95b8e42ef9a3f2792ec4d7f32

    • SHA512

      c20a8a5a7cca0fad294c6aa4ccbe95c87b3c42ac13045d3cbfc26f3aa31bb4cc7d75978ef5d5481348e088c5373924a12dce9540376f4650c636ed5e99524ed0

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjm:r5sJo6YrFUiyAak11Ltjm

    Score
    7/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks