Overview

overview

8

Static

static

1

fd8d5e3aaf...cb.exe

windows7-x64

8

fd8d5e3aaf...cb.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd8d5e3aafddc22cd6ea9751d56bb2f0834993fa2193d7d715123757e03e0dcb

  • Size

    234KB

  • Sample

    240113-x8bbkaeec8

  • MD5

    7547b8abfab85d6b2491de04d4dd8541

  • SHA1

    2c929912426d6f67fc2fb2203b57d2d1c366caf9

  • SHA256

    fd8d5e3aafddc22cd6ea9751d56bb2f0834993fa2193d7d715123757e03e0dcb

  • SHA512

    bf43f9d0a73917bc7575dabaa4bacd14217692624bb40be81d57d2a32e0b6d38ea22d21f87b692226a596f16ce0c9bd0535d0f9ad4990d80c9784612e3338398

  • SSDEEP

    3072:zwzvOYTU5duvT/DvbEvK9aobNI2B+Nl4jz+b0atWH1TmFtotpcat8iKdlVST31O6:mUXyh9H/B+rdBV+UdvrEFp7hKU

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      fd8d5e3aafddc22cd6ea9751d56bb2f0834993fa2193d7d715123757e03e0dcb

    • Size

      234KB

    • MD5

      7547b8abfab85d6b2491de04d4dd8541

    • SHA1

      2c929912426d6f67fc2fb2203b57d2d1c366caf9

    • SHA256

      fd8d5e3aafddc22cd6ea9751d56bb2f0834993fa2193d7d715123757e03e0dcb

    • SHA512

      bf43f9d0a73917bc7575dabaa4bacd14217692624bb40be81d57d2a32e0b6d38ea22d21f87b692226a596f16ce0c9bd0535d0f9ad4990d80c9784612e3338398

    • SSDEEP

      3072:zwzvOYTU5duvT/DvbEvK9aobNI2B+Nl4jz+b0atWH1TmFtotpcat8iKdlVST31O6:mUXyh9H/B+rdBV+UdvrEFp7hKU

    Score
    8/10
    persistenceupx

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks