Overview

overview

10

Static

static

7

3f913d513d...e4.exe

windows7-x64

10

3f913d513d...e4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3f913d513d97eb3ca8c8700f7de58fe4

  • Size

    143KB

  • Sample

    240104-bz1dfaeebm

  • MD5

    3f913d513d97eb3ca8c8700f7de58fe4

  • SHA1

    c4ab3eaf01090a6751fa9b6878714cad99e493aa

  • SHA256

    4fc794f0028f3adb7b8efb6e02a196310ca9edde439ae8ac47f51b485d0eceaf

  • SHA512

    eda3c24ff4cce392475555dc250268ec4bf0b7eeb155d95d76125c09c288db76419d00aa53db12bd95c668be0de162b2cbb01c4dcd0080a294e7da3298de9bee

  • SSDEEP

    3072:ARFHEVUkrbJqMn+3WAXqmLe8Q+9NO+4nU6QVW6hiq3/IX5jLVoutq:AR2VJxqz3WAXqmLeCNV6QVNEq3WpoS

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      3f913d513d97eb3ca8c8700f7de58fe4

    • Size

      143KB

    • MD5

      3f913d513d97eb3ca8c8700f7de58fe4

    • SHA1

      c4ab3eaf01090a6751fa9b6878714cad99e493aa

    • SHA256

      4fc794f0028f3adb7b8efb6e02a196310ca9edde439ae8ac47f51b485d0eceaf

    • SHA512

      eda3c24ff4cce392475555dc250268ec4bf0b7eeb155d95d76125c09c288db76419d00aa53db12bd95c668be0de162b2cbb01c4dcd0080a294e7da3298de9bee

    • SSDEEP

      3072:ARFHEVUkrbJqMn+3WAXqmLe8Q+9NO+4nU6QVW6hiq3/IX5jLVoutq:AR2VJxqz3WAXqmLeCNV6QVNEq3WpoS

    Score
    10/10
    evasionupx

    • Modifies firewall policy service

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks