Overview

overview

8

Static

static

1

d544b28cf4...9c.exe

windows7-x64

7

d544b28cf4...9c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d544b28cf4dcef3b948cea68a295bdf5dfbf6a4ca5beb6f29301f7dfbb107f9c

  • Size

    234KB

  • Sample

    240126-s3f8eaghc8

  • MD5

    cb82700eb090b9c4eb9765717ee2be8f

  • SHA1

    fa15217978c1d552a3facfd64515bfa3fb0425e2

  • SHA256

    d544b28cf4dcef3b948cea68a295bdf5dfbf6a4ca5beb6f29301f7dfbb107f9c

  • SHA512

    5814663a5a197a63953e95683681c64d4378d36c41d8e44ddf06422d4e0430eb9f15830fdbbdb4b310f06585548f2d1bb226eda89bfd14e9ebb40cf6793fb433

  • SSDEEP

    3072:swzvOYwD5YP/aKavT/Dvb99bNI2B+el0LTGzkWJWXVfShNgpNcOJkeaNd1KP7ZKf:CDiP/aK2hz/B+XmBV+UdvrEFp7hKp

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      d544b28cf4dcef3b948cea68a295bdf5dfbf6a4ca5beb6f29301f7dfbb107f9c

    • Size

      234KB

    • MD5

      cb82700eb090b9c4eb9765717ee2be8f

    • SHA1

      fa15217978c1d552a3facfd64515bfa3fb0425e2

    • SHA256

      d544b28cf4dcef3b948cea68a295bdf5dfbf6a4ca5beb6f29301f7dfbb107f9c

    • SHA512

      5814663a5a197a63953e95683681c64d4378d36c41d8e44ddf06422d4e0430eb9f15830fdbbdb4b310f06585548f2d1bb226eda89bfd14e9ebb40cf6793fb433

    • SSDEEP

      3072:swzvOYwD5YP/aKavT/Dvb99bNI2B+el0LTGzkWJWXVfShNgpNcOJkeaNd1KP7ZKf:CDiP/aK2hz/B+XmBV+UdvrEFp7hKp

    Score
    8/10
    upxpersistence

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks