Overview

overview

8

Static

static

7

5b6bfaa80e...dc.exe

windows7-x64

8

5b6bfaa80e...dc.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b6bfaa80e1cbbe8f2e863f35c38c8dc

  • Size

    11KB

  • Sample

    240114-rbe1labchk

  • MD5

    5b6bfaa80e1cbbe8f2e863f35c38c8dc

  • SHA1

    afb0b3ab351ce1f23ab13167c0430118bbf0cd93

  • SHA256

    af75904e7bd20ba25964fe3ee89685973d4df2495cb6cc7756e9a8e385292a83

  • SHA512

    2896130c508dfb91e195da776991648e2d893da6dd2bba6c1a4d390e7a8d5b14b1cbbb782f1ef3074bc1917880cd685290222fef986bf9499e7bf28474f54056

  • SSDEEP

    192:5F6qSgQ5qhSBPgVHIPZuS4QJcyMX/bGsWqcaoLEVRamdl6zDAuN:5F6qSg/SBPSIPE0JcBzGuoLyd5k

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      5b6bfaa80e1cbbe8f2e863f35c38c8dc

    • Size

      11KB

    • MD5

      5b6bfaa80e1cbbe8f2e863f35c38c8dc

    • SHA1

      afb0b3ab351ce1f23ab13167c0430118bbf0cd93

    • SHA256

      af75904e7bd20ba25964fe3ee89685973d4df2495cb6cc7756e9a8e385292a83

    • SHA512

      2896130c508dfb91e195da776991648e2d893da6dd2bba6c1a4d390e7a8d5b14b1cbbb782f1ef3074bc1917880cd685290222fef986bf9499e7bf28474f54056

    • SSDEEP

      192:5F6qSgQ5qhSBPgVHIPZuS4QJcyMX/bGsWqcaoLEVRamdl6zDAuN:5F6qSg/SBPSIPE0JcBzGuoLyd5k

    Score
    8/10
    persistenceupx

    • Modifies AppInit DLL entries

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks