Overview

overview

7

Static

static

7

1c93dbe494...29.exe

windows7-x64

7

1c93dbe494...29.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c93dbe494b2ed33e3bba44321f34a29

  • Size

    441KB

  • Sample

    231230-z1wzeahfgr

  • MD5

    1c93dbe494b2ed33e3bba44321f34a29

  • SHA1

    f25bb00c2cfa62bcf03e804376651a19113eb2e8

  • SHA256

    3ff9090d4f4b684b0cec9f1d2ae184e422394a183a9cacf930bea104ad92ce9c

  • SHA512

    f2ee84fbd37dd8c898a4dded3ae9bf28436cfa615cb15c0c9b2251592ea2ce661e9c155b0fb19097ff2340e34cbd692fcbaca6472e411b1d2542f3508760c217

  • SSDEEP

    12288:k1PO8MeQh81uhNmq+jhfgKBm3iBZFPn5L:cPO8MeQS143+jhfjasv9

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      1c93dbe494b2ed33e3bba44321f34a29

    • Size

      441KB

    • MD5

      1c93dbe494b2ed33e3bba44321f34a29

    • SHA1

      f25bb00c2cfa62bcf03e804376651a19113eb2e8

    • SHA256

      3ff9090d4f4b684b0cec9f1d2ae184e422394a183a9cacf930bea104ad92ce9c

    • SHA512

      f2ee84fbd37dd8c898a4dded3ae9bf28436cfa615cb15c0c9b2251592ea2ce661e9c155b0fb19097ff2340e34cbd692fcbaca6472e411b1d2542f3508760c217

    • SSDEEP

      12288:k1PO8MeQh81uhNmq+jhfgKBm3iBZFPn5L:cPO8MeQS143+jhfjasv9

    Score
    7/10
    persistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks