General

  • Target

    2a9fa2d54e35c60772caae1eefa01a6a

  • Size

    1.6MB

  • Sample

    231231-ghr9dsbbe9

  • MD5

    2a9fa2d54e35c60772caae1eefa01a6a

  • SHA1

    0833f26cd54ab5d24fbf7ece1f16f9db72a5311a

  • SHA256

    7472e6a19d93b11dd6b05ee54943c196e8c933186cbbfa2c4887dca7902c2159

  • SHA512

    ce599780ebae8da863dcb6eefb05fae6178e65fb2eaef7261e939d05851e906d58cd0ef833ff35eee47881847d6197585a63ec4f62a873fd68c49e3f9a867dd7

  • SSDEEP

    49152:JlicMs+gbAd5cakLz06u6Ftc7YcaDjXXUiLcakLz0O:JlicMsrbA7cakc6u6rc7LaD7kWcakcO

Score
7/10
upx

Malware Config

Targets

    • Target

      2a9fa2d54e35c60772caae1eefa01a6a

    • Size

      1.6MB

    • MD5

      2a9fa2d54e35c60772caae1eefa01a6a

    • SHA1

      0833f26cd54ab5d24fbf7ece1f16f9db72a5311a

    • SHA256

      7472e6a19d93b11dd6b05ee54943c196e8c933186cbbfa2c4887dca7902c2159

    • SHA512

      ce599780ebae8da863dcb6eefb05fae6178e65fb2eaef7261e939d05851e906d58cd0ef833ff35eee47881847d6197585a63ec4f62a873fd68c49e3f9a867dd7

    • SSDEEP

      49152:JlicMs+gbAd5cakLz06u6Ftc7YcaDjXXUiLcakLz0O:JlicMsrbA7cakc6u6rc7LaD7kWcakcO

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks