Overview

overview

7

Static

static

3

3a056ecbb5...8a.exe

windows7-x64

7

3a056ecbb5...8a.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3a056ecbb52853c578b1de59d505008a

  • Size

    398KB

  • Sample

    231231-rymnyshha3

  • MD5

    3a056ecbb52853c578b1de59d505008a

  • SHA1

    10c54d9f77782245409ef2ee8850f6175047fa11

  • SHA256

    f0cf40cc08983d905adb037c7d7ce44fd5298dae19f9d142d302899558943074

  • SHA512

    b21f40d840551d8b3eaf4332f3fc1d95ba139ba4ddedc3be49fc944598635f30359c50f29e183da153c300055a046c927c2cb4edac07a8eaf7975b1ffe53d4e7

  • SSDEEP

    6144:GeQDckG5evCaSYHvZNXAAHPiuUj+OPI3VySk1HAtBYxpzL+9:GeQDpqe1SumcPiuU9EWe+L+9

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      3a056ecbb52853c578b1de59d505008a

    • Size

      398KB

    • MD5

      3a056ecbb52853c578b1de59d505008a

    • SHA1

      10c54d9f77782245409ef2ee8850f6175047fa11

    • SHA256

      f0cf40cc08983d905adb037c7d7ce44fd5298dae19f9d142d302899558943074

    • SHA512

      b21f40d840551d8b3eaf4332f3fc1d95ba139ba4ddedc3be49fc944598635f30359c50f29e183da153c300055a046c927c2cb4edac07a8eaf7975b1ffe53d4e7

    • SSDEEP

      6144:GeQDckG5evCaSYHvZNXAAHPiuUj+OPI3VySk1HAtBYxpzL+9:GeQDpqe1SumcPiuU9EWe+L+9

    Score
    7/10
    persistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks