Overview

overview

10

Static

static

3

2cc79b51b3...08.exe

windows7-x64

10

2cc79b51b3...08.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2cc79b51b33f2bfd386e4a4c44eec408

  • Size

    252KB

  • Sample

    231231-hydavachcl

  • MD5

    2cc79b51b33f2bfd386e4a4c44eec408

  • SHA1

    cc1baa0ea75edceae2b2349c993830248e17d4cd

  • SHA256

    72ddd58a65dd62b75157daf1cb0b8a5a12b94e57453f1b6fbb7a46ef00272fb4

  • SHA512

    9ca9fe1c34bfe25aaaa9d0ab0be556326c04b0a1256e772f826478c029aaba2a5f0397476467400790cd3e594ee34e4d3c8757fd38e8fd95f6b77041679d95ba

  • SSDEEP

    6144:86wFvhbvdR5q4ysQE4msaUxE/DbpQ3CbtLn:86wFv6rVE4mnUxE/Dby3m

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      2cc79b51b33f2bfd386e4a4c44eec408

    • Size

      252KB

    • MD5

      2cc79b51b33f2bfd386e4a4c44eec408

    • SHA1

      cc1baa0ea75edceae2b2349c993830248e17d4cd

    • SHA256

      72ddd58a65dd62b75157daf1cb0b8a5a12b94e57453f1b6fbb7a46ef00272fb4

    • SHA512

      9ca9fe1c34bfe25aaaa9d0ab0be556326c04b0a1256e772f826478c029aaba2a5f0397476467400790cd3e594ee34e4d3c8757fd38e8fd95f6b77041679d95ba

    • SSDEEP

      6144:86wFvhbvdR5q4ysQE4msaUxE/DbpQ3CbtLn:86wFv6rVE4mnUxE/Dby3m

    Score
    10/10
    evasionupx

    • Modifies firewall policy service

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks