Overview

overview

8

Static

static

3

673b038fe6...7f.exe

windows7-x64

8

673b038fe6...7f.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    673b038fe6b21d1d4e69029e6837037f

  • Size

    448KB

  • Sample

    240119-k3eetabec5

  • MD5

    673b038fe6b21d1d4e69029e6837037f

  • SHA1

    818b11ba12f8ea007a2d740b44ed09db8ea539d7

  • SHA256

    600de0d6adb5dda080a4a6cb2b8860d5f104fc628b9a3e34b85d3e844b15f8e4

  • SHA512

    4a8f4af37f97349fe524afabdd7e0598b25ab72f97e4b190474a211e069da23536a27fd4a27d4fb01c86cc7217b578383d6f6556b4037cc9461df908c4384fc3

  • SSDEEP

    12288:ilQRH00qY1mOKouCzFMHVui7gBcszKAANbGV:pHyY1mhr7QcsZCb0

Score
8/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      673b038fe6b21d1d4e69029e6837037f

    • Size

      448KB

    • MD5

      673b038fe6b21d1d4e69029e6837037f

    • SHA1

      818b11ba12f8ea007a2d740b44ed09db8ea539d7

    • SHA256

      600de0d6adb5dda080a4a6cb2b8860d5f104fc628b9a3e34b85d3e844b15f8e4

    • SHA512

      4a8f4af37f97349fe524afabdd7e0598b25ab72f97e4b190474a211e069da23536a27fd4a27d4fb01c86cc7217b578383d6f6556b4037cc9461df908c4384fc3

    • SSDEEP

      12288:ilQRH00qY1mOKouCzFMHVui7gBcszKAANbGV:pHyY1mhr7QcsZCb0

    Score
    8/10
    evasionpersistenceupx

    • Disables Task Manager via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks