Overview

overview

10

Static

static

7

5bfd78bced...1a.exe

windows7-x64

10

5bfd78bced...1a.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5bfd78bced71dbab1a14d6b2c4282e1a

  • Size

    208KB

  • Sample

    240115-dsty7agchq

  • MD5

    5bfd78bced71dbab1a14d6b2c4282e1a

  • SHA1

    6c42e977cbfcbc19e157b77d36e6eacb7846cc86

  • SHA256

    056da63b22afcd3adff79b4da85d0a672bb0bd9a6674c37b77f991e20bf0fb4a

  • SHA512

    77ab53248a39b5a9cfb38de9d40be5b8da65ee54f55c8df17baccc582c4288db09063e1548084ff391194d7be3f00b93bd224d3c69332f7e5ee20c238899509e

  • SSDEEP

    6144:TqchxygjVJbRE6g6fM2W/RrbwgS1o2x2XJoS:mqIgj3bRGSgyxUoS

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      5bfd78bced71dbab1a14d6b2c4282e1a

    • Size

      208KB

    • MD5

      5bfd78bced71dbab1a14d6b2c4282e1a

    • SHA1

      6c42e977cbfcbc19e157b77d36e6eacb7846cc86

    • SHA256

      056da63b22afcd3adff79b4da85d0a672bb0bd9a6674c37b77f991e20bf0fb4a

    • SHA512

      77ab53248a39b5a9cfb38de9d40be5b8da65ee54f55c8df17baccc582c4288db09063e1548084ff391194d7be3f00b93bd224d3c69332f7e5ee20c238899509e

    • SSDEEP

      6144:TqchxygjVJbRE6g6fM2W/RrbwgS1o2x2XJoS:mqIgj3bRGSgyxUoS

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks