Overview

overview

10

Static

static

7

6396a01ba4...a9.dll

windows7-x64

10

6396a01ba4...a9.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6396a01ba4a4862c2f8efed81c940ea9

  • Size

    22KB

  • Sample

    240117-zr9txafba6

  • MD5

    6396a01ba4a4862c2f8efed81c940ea9

  • SHA1

    ec1d9f762cec09437c9f4ecd0b2c94a2f615ab10

  • SHA256

    d832a3dffe9094a30b0d866e9b39e934220a36a8e7bc62851916026c42bb4985

  • SHA512

    6ce2a0a6d4a1c49567151fa4f46889d378ef64987820866c33ed7050ed755162dd8e30afbb614fdb86517cf0a012b6dfef7e916519362a54e2bd0a8717c968b3

  • SSDEEP

    384:A8aE+2FgmxVUnU/4Ty1/XPiAlXMNK8HtD7clNnirvJ0p1+Kf:A8aE/FhUnUUy11XEK8ND7gNn1p1+

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      6396a01ba4a4862c2f8efed81c940ea9

    • Size

      22KB

    • MD5

      6396a01ba4a4862c2f8efed81c940ea9

    • SHA1

      ec1d9f762cec09437c9f4ecd0b2c94a2f615ab10

    • SHA256

      d832a3dffe9094a30b0d866e9b39e934220a36a8e7bc62851916026c42bb4985

    • SHA512

      6ce2a0a6d4a1c49567151fa4f46889d378ef64987820866c33ed7050ed755162dd8e30afbb614fdb86517cf0a012b6dfef7e916519362a54e2bd0a8717c968b3

    • SSDEEP

      384:A8aE+2FgmxVUnU/4Ty1/XPiAlXMNK8HtD7clNnirvJ0p1+Kf:A8aE/FhUnUUy11XEK8ND7gNn1p1+

    Score
    10/10
    evasionupx

    • Modifies firewall policy service

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks