Overview

overview

8

Static

static

7

a0b72b0c51...fe.exe

windows7-x64

8

a0b72b0c51...fe.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a0b72b0c515a18a845b322949efbbdfe

  • Size

    34KB

  • Sample

    240224-ajl1fade4w

  • MD5

    a0b72b0c515a18a845b322949efbbdfe

  • SHA1

    39c05d666a0aa81b828aa95ebfbb27f4a7e40b01

  • SHA256

    4d1246cddf139475d9f8b3c42e10872a501c359a8519d5a5b334366c23a0ffd2

  • SHA512

    3315124a3e7c19d741221679f4b0bb825400ed1f6d370e078ed19b3435004e24132717ccd5265b8c3b8e7844f4263c33ff4df15851e22e800905f91e0b674eec

  • SSDEEP

    384:iS5jdV3AMwZvu+WTlNRSUrrb+hgiu4A78qi92vc542X522sNGI:iS5JWZZvu+WTMULYMJ8qHyJ22

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      a0b72b0c515a18a845b322949efbbdfe

    • Size

      34KB

    • MD5

      a0b72b0c515a18a845b322949efbbdfe

    • SHA1

      39c05d666a0aa81b828aa95ebfbb27f4a7e40b01

    • SHA256

      4d1246cddf139475d9f8b3c42e10872a501c359a8519d5a5b334366c23a0ffd2

    • SHA512

      3315124a3e7c19d741221679f4b0bb825400ed1f6d370e078ed19b3435004e24132717ccd5265b8c3b8e7844f4263c33ff4df15851e22e800905f91e0b674eec

    • SSDEEP

      384:iS5jdV3AMwZvu+WTlNRSUrrb+hgiu4A78qi92vc542X522sNGI:iS5JWZZvu+WTMULYMJ8qHyJ22

    Score
    8/10
    persistenceupx

    • Drops file in Drivers directory

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Program crash

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks