Overview

overview

8

Static

static

3

bc95cc1542...8c.exe

windows7-x64

8

bc95cc1542...8c.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc95cc154277bfb5d3fa926e68ef6c31022ed66a5618c0ddd96fbaa402328c8c

  • Size

    1.4MB

  • Sample

    240223-s5kcvadd7z

  • MD5

    3045d280c8db6261d513a3b4a4cd5002

  • SHA1

    95ed26443f3cbe87856cc83b8e314ad13ca09a6c

  • SHA256

    bc95cc154277bfb5d3fa926e68ef6c31022ed66a5618c0ddd96fbaa402328c8c

  • SHA512

    4ea43656e4bcbfd712528f28cf424d19325c847ae3884a7893fba1c07d09686e5ba14ff0a6039522003eaab3760c4cdc7c666dfdc7ba3ec472cd8d1f3c25d5f9

  • SSDEEP

    24576:wCN9abWvBH/fJ4yL/tNCJPXUQrPlrrEH7LFO:vN8bW5H/fJ4klKXntp

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      bc95cc154277bfb5d3fa926e68ef6c31022ed66a5618c0ddd96fbaa402328c8c

    • Size

      1.4MB

    • MD5

      3045d280c8db6261d513a3b4a4cd5002

    • SHA1

      95ed26443f3cbe87856cc83b8e314ad13ca09a6c

    • SHA256

      bc95cc154277bfb5d3fa926e68ef6c31022ed66a5618c0ddd96fbaa402328c8c

    • SHA512

      4ea43656e4bcbfd712528f28cf424d19325c847ae3884a7893fba1c07d09686e5ba14ff0a6039522003eaab3760c4cdc7c666dfdc7ba3ec472cd8d1f3c25d5f9

    • SSDEEP

      24576:wCN9abWvBH/fJ4yL/tNCJPXUQrPlrrEH7LFO:vN8bW5H/fJ4klKXntp

    Score
    8/10
    persistenceupx

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks