Overview

overview

7

Static

static

7

85bdc48b39...03.exe

windows7-x64

7

85bdc48b39...03.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85bdc48b39576fa5bfb52607c8e2bd03

  • Size

    185KB

  • Sample

    240201-dewwmahha3

  • MD5

    85bdc48b39576fa5bfb52607c8e2bd03

  • SHA1

    92c7f925ddfc924b55e1c9b7434e940538f8c3c0

  • SHA256

    c07ceea614d3e0f33b0b5271b922395933d96256258704cd5928685980c50a86

  • SHA512

    26e2766421ff8daead71c5341bfecdef4384e8e466a27bf0d866e89113c50fb569119f1a362e62a8e46657704ebe4d290b6b3038271326de4a49e4fa05dcfca6

  • SSDEEP

    3072:LjPKZ0Gni2zhCqUmoEBeBJbqC8A3I1DXw0WWhGojehnPXN/uqNHlGQXitmtyMXK:nPEACdBeBJbqCLCE+hRjehPXMqNFitmM

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      85bdc48b39576fa5bfb52607c8e2bd03

    • Size

      185KB

    • MD5

      85bdc48b39576fa5bfb52607c8e2bd03

    • SHA1

      92c7f925ddfc924b55e1c9b7434e940538f8c3c0

    • SHA256

      c07ceea614d3e0f33b0b5271b922395933d96256258704cd5928685980c50a86

    • SHA512

      26e2766421ff8daead71c5341bfecdef4384e8e466a27bf0d866e89113c50fb569119f1a362e62a8e46657704ebe4d290b6b3038271326de4a49e4fa05dcfca6

    • SSDEEP

      3072:LjPKZ0Gni2zhCqUmoEBeBJbqC8A3I1DXw0WWhGojehnPXN/uqNHlGQXitmtyMXK:nPEACdBeBJbqCLCE+hRjehPXMqNFitmM

    Score
    7/10
    persistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks