Overview

overview

8

Static

static

3

ab9694e4c8...e4.exe

windows7-x64

8

ab9694e4c8...e4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab9694e4c8a950146d6471bf9843bbe4

  • Size

    56KB

  • Sample

    240228-lpvejsge85

  • MD5

    ab9694e4c8a950146d6471bf9843bbe4

  • SHA1

    711e1b3fbff6bc5bd6dd09b5bfffdab5b8e5bfca

  • SHA256

    61cc4963a1f91739466fb11447bd32061e5bd22cad31b4b92da305ba61579ece

  • SHA512

    e7416b3fa23350f537f6d93a258b7a1dbb38870e43e711049b52af61f36928cf54685c5df95db6a8607d003ebb82efe87cb80b1a970064baa73d4dd14442d7c0

  • SSDEEP

    1536:ZtBZRLBmI990of+Bi3zydvuRssiN0J85lvFMARRq:fBZ9Bz9RQijy9uesDCm

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      ab9694e4c8a950146d6471bf9843bbe4

    • Size

      56KB

    • MD5

      ab9694e4c8a950146d6471bf9843bbe4

    • SHA1

      711e1b3fbff6bc5bd6dd09b5bfffdab5b8e5bfca

    • SHA256

      61cc4963a1f91739466fb11447bd32061e5bd22cad31b4b92da305ba61579ece

    • SHA512

      e7416b3fa23350f537f6d93a258b7a1dbb38870e43e711049b52af61f36928cf54685c5df95db6a8607d003ebb82efe87cb80b1a970064baa73d4dd14442d7c0

    • SSDEEP

      1536:ZtBZRLBmI990of+Bi3zydvuRssiN0J85lvFMARRq:fBZ9Bz9RQijy9uesDCm

    Score
    8/10
    persistenceupx

    • Modifies AppInit DLL entries

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks