Overview

overview

8

Static

static

7

17477af95b...d3.exe

windows7-x64

8

17477af95b...d3.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17477af95b7b4ec2958102691a5677d3

  • Size

    10KB

  • Sample

    231230-nqgaesbge5

  • MD5

    17477af95b7b4ec2958102691a5677d3

  • SHA1

    441ee1a2c83a027d7bc2f5b8b0a9d45edb1e27e6

  • SHA256

    ea1bbd44c46577fde3ceff3e4892c8a4c06c2bc0c2e0f9f14b9ca97e9f9ef6ea

  • SHA512

    da672161fdec1617d4d64e5ee15acf798244da8a5cbb4bc92ea4a8175d6407bf59d2a696afd27ded0deee16c19175c1e5e51a928f8980fcc0e1b259a5e1b84c7

  • SSDEEP

    192:bIGRQruTIWTez+CIrav6PilUf2nrOO/yFIi3buJccg:5RQru0WKiCIrCNlUfCT/yFDu/g

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      17477af95b7b4ec2958102691a5677d3

    • Size

      10KB

    • MD5

      17477af95b7b4ec2958102691a5677d3

    • SHA1

      441ee1a2c83a027d7bc2f5b8b0a9d45edb1e27e6

    • SHA256

      ea1bbd44c46577fde3ceff3e4892c8a4c06c2bc0c2e0f9f14b9ca97e9f9ef6ea

    • SHA512

      da672161fdec1617d4d64e5ee15acf798244da8a5cbb4bc92ea4a8175d6407bf59d2a696afd27ded0deee16c19175c1e5e51a928f8980fcc0e1b259a5e1b84c7

    • SSDEEP

      192:bIGRQruTIWTez+CIrav6PilUf2nrOO/yFIi3buJccg:5RQru0WKiCIrCNlUfCT/yFDu/g

    Score
    8/10
    persistenceupx

    • Modifies AppInit DLL entries

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks