Overview

overview

10

Static

static

3

8a9dc7332d...29.exe

windows7-x64

10

8a9dc7332d...29.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a9dc7332ddb5d219112d44d24947129

  • Size

    457KB

  • Sample

    240202-1ng56aafel

  • MD5

    8a9dc7332ddb5d219112d44d24947129

  • SHA1

    44d5209998759febbe2580540b7e63ce2fae68b6

  • SHA256

    5950f3e4364585a438f8ba11e767ff99f7d06a533b3ca3563cee1befaa47b612

  • SHA512

    75f1a06e008ae5b7d5fa6b8e184f7c9de56c968eebed52bdfac6d23ab5f31f56b2e36f6884bbae5d26912977d936952c581ce9ca1d260cb2799e9f241d9fa50f

  • SSDEEP

    6144:Ay7/24dGOrRcsSB+KT+Y8sV9CHTwTes9Knl54CFEiEBspa51LHR3W369dyH:V7u4xRlD8T8sV9zTv27EBoaPLxdvs

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      8a9dc7332ddb5d219112d44d24947129

    • Size

      457KB

    • MD5

      8a9dc7332ddb5d219112d44d24947129

    • SHA1

      44d5209998759febbe2580540b7e63ce2fae68b6

    • SHA256

      5950f3e4364585a438f8ba11e767ff99f7d06a533b3ca3563cee1befaa47b612

    • SHA512

      75f1a06e008ae5b7d5fa6b8e184f7c9de56c968eebed52bdfac6d23ab5f31f56b2e36f6884bbae5d26912977d936952c581ce9ca1d260cb2799e9f241d9fa50f

    • SSDEEP

      6144:Ay7/24dGOrRcsSB+KT+Y8sV9CHTwTes9Knl54CFEiEBspa51LHR3W369dyH:V7u4xRlD8T8sV9zTv27EBoaPLxdvs

    Score
    10/10
    evasionpersistenceupx

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks