Overview

overview

8

Static

static

1

5f3e8fcaab...69.exe

windows7-x64

8

5f3e8fcaab...69.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5f3e8fcaab2add8b5c079abf5c9d036cfd4270ac5e84deb4f35031ad1e600c69

  • Size

    234KB

  • Sample

    240127-pqwksadhgm

  • MD5

    f9967861b537fed77bbfb40f8d835b2b

  • SHA1

    d3a04d507439f5d2e298b8870e8e6843ffc8d524

  • SHA256

    5f3e8fcaab2add8b5c079abf5c9d036cfd4270ac5e84deb4f35031ad1e600c69

  • SHA512

    ab535cf98950f4771d082ae44cf2876ea434c5c3a5d4b1fa42120770cc516c2d22106f2181363049ffc53ad9720d3930de25adbd24e0feafede409ac22d9586d

  • SSDEEP

    3072:fwzvOYRM5YP/aKavT/DvbEvE2I2B+Tls7LOjkWxmfd36Z9YJh0GRUGSNVpyDzRqs:4MiP/aK2t2/B+35BV+UdvrEFp7hKQL

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      5f3e8fcaab2add8b5c079abf5c9d036cfd4270ac5e84deb4f35031ad1e600c69

    • Size

      234KB

    • MD5

      f9967861b537fed77bbfb40f8d835b2b

    • SHA1

      d3a04d507439f5d2e298b8870e8e6843ffc8d524

    • SHA256

      5f3e8fcaab2add8b5c079abf5c9d036cfd4270ac5e84deb4f35031ad1e600c69

    • SHA512

      ab535cf98950f4771d082ae44cf2876ea434c5c3a5d4b1fa42120770cc516c2d22106f2181363049ffc53ad9720d3930de25adbd24e0feafede409ac22d9586d

    • SSDEEP

      3072:fwzvOYRM5YP/aKavT/DvbEvE2I2B+Tls7LOjkWxmfd36Z9YJh0GRUGSNVpyDzRqs:4MiP/aK2t2/B+35BV+UdvrEFp7hKQL

    Score
    8/10
    persistenceupx

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks