Overview

overview

8

Static

static

7

a1ceda5c8f...38.exe

windows7-x64

8

a1ceda5c8f...38.exe

windows10-2004-x64

7

$TEMP/Nj6Njby3.dll

windows7-x64

7

$TEMP/Nj6Njby3.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1ceda5c8fa4d52a39be3c5d7509d138

  • Size

    105KB

  • Sample

    240224-n3jw3sah59

  • MD5

    a1ceda5c8fa4d52a39be3c5d7509d138

  • SHA1

    90a09ae26e76b31699a484c26adf09513085867f

  • SHA256

    80e4e293cb6439bd8ad773f927e949165865c90489767a6ce087835b1d3f28c8

  • SHA512

    14bc6596bdf4bc6cbe4fa8fea5ef5ce7f8841d403fe7c6142849ea19e57143db12f43c38f71216210f25216003b2e6b39ef9e344a6749938cf6ef59c853d1a65

  • SSDEEP

    3072:IgXdZt9P6D3XJbCP92ogpXVGAO1Fm3UTINbRwWahTHY:Ie344P9Ei1Fm3yINbRzahT4

Score
8/10
upx

Malware Config

Targets

    • Target

      a1ceda5c8fa4d52a39be3c5d7509d138

    • Size

      105KB

    • MD5

      a1ceda5c8fa4d52a39be3c5d7509d138

    • SHA1

      90a09ae26e76b31699a484c26adf09513085867f

    • SHA256

      80e4e293cb6439bd8ad773f927e949165865c90489767a6ce087835b1d3f28c8

    • SHA512

      14bc6596bdf4bc6cbe4fa8fea5ef5ce7f8841d403fe7c6142849ea19e57143db12f43c38f71216210f25216003b2e6b39ef9e344a6749938cf6ef59c853d1a65

    • SSDEEP

      3072:IgXdZt9P6D3XJbCP92ogpXVGAO1Fm3UTINbRwWahTHY:Ie344P9Ei1Fm3yINbRzahT4

    Score
    8/10
    upx

    • Blocklisted process makes network request

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $TEMP/Nj6Njby3.dll

    • Size

      74KB

    • MD5

      a6e17cec6dd1f2c2e721bea75c06c905

    • SHA1

      e87a6ccdb7a111816a5417638e024dcf5db339cd

    • SHA256

      cb777bd96b4a5efd87f1bd7ec854804275fe74a006e0e8091d47d35adaca7593

    • SHA512

      f7cb838eda0dcd4a530db85d539d7cf42744c953ad38692bbdcb5f894a9a9536f62c72c70ee63e8135393c14528109568dcb72fc0e815bcaaf01b499cc162dae

    • SSDEEP

      1536:6yOS+Cb1n+0+RtQ8J+l64zDZLyfCgvAZxWv:6yzhN+0eTJaDFyfpT

    Score
    7/10
    upx

    • Deletes itself

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks