Overview

overview

7

Static

static

7

41c156bd08...aa.exe

windows7-x64

7

41c156bd08...aa.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41c156bd08fc9f69b8dcc2b95ff8e0aa

  • Size

    220KB

  • Sample

    240104-yhx83sadf5

  • MD5

    41c156bd08fc9f69b8dcc2b95ff8e0aa

  • SHA1

    76c2e8731716d696aa2d8363bbc8c028e0b5b411

  • SHA256

    d0484c60132079781e690b1964279b63878f5bf198d73ebcd92b242fdc76ada7

  • SHA512

    dc84e39bd14f4f54c17af7ff4eca8674c057cf729356d52fd164b888d7e13854139c0601f1eae5ae55308244938aab3ba72855bd99cb0330ae1236f51f16826a

  • SSDEEP

    6144:v6YZemhU4DJaU22U2P3lf3RFkQf8RQM6AVE/Vs:iFdQ93nC8LM6Au

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      41c156bd08fc9f69b8dcc2b95ff8e0aa

    • Size

      220KB

    • MD5

      41c156bd08fc9f69b8dcc2b95ff8e0aa

    • SHA1

      76c2e8731716d696aa2d8363bbc8c028e0b5b411

    • SHA256

      d0484c60132079781e690b1964279b63878f5bf198d73ebcd92b242fdc76ada7

    • SHA512

      dc84e39bd14f4f54c17af7ff4eca8674c057cf729356d52fd164b888d7e13854139c0601f1eae5ae55308244938aab3ba72855bd99cb0330ae1236f51f16826a

    • SSDEEP

      6144:v6YZemhU4DJaU22U2P3lf3RFkQf8RQM6AVE/Vs:iFdQ93nC8LM6Au

    Score
    7/10
    persistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks