Overview

overview

10

Static

static

7

8xyz8/8xyz...gs.vbs

windows7-x64

3

8xyz8/8xyz...gs.vbs

windows10-2004-x64

1

8xyz8/8xyz...Me.txt

windows7-x64

1

8xyz8/8xyz...Me.txt

windows10-2004-x64

1

8xyz8/8xyz...ol.exe

windows7-x64

10

8xyz8/8xyz...ol.exe

windows10-2004-x64

7

out.exe

windows7-x64

out.exe

windows10-2004-x64

8xyz8/8xyz...ol.ini

windows7-x64

1

8xyz8/8xyz...ol.ini

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sss.zip

  • Size

    448KB

  • Sample

    240229-ejzczscg9t

  • MD5

    966f5b327aca3966cf6dadaa2b966531

  • SHA1

    03acb2f127ddfdd818af92cf6bfe83742e39ab11

  • SHA256

    ad5fa8bfa147cca096f18185e0f9874ce6931c78ddae0eafec38b1c61a38eddf

  • SHA512

    d8ec41d79793920734fcbe32c353be6f07ea7d4e3a42c2aca559b378aa85e420e8fc070ca2c1a063013d63482d2284dd7510931acff768e24d90dc4a57218408

  • SSDEEP

    6144:SUcIgFnTUsPD2ADPcbJ5G5YLynTxSYcofdfpaGyw9yEjobucvSwnBPF8rDCY9Yri:KFT5Lc95Y6ynYHofdfppn4UJctToWZA

Score
10/10
evasiontrojanupx

Malware Config

Targets

    • Target

      8xyz8/8xyz8/Defender_Settings.vbs

    • Size

      313B

    • MD5

      b0bf0a477bcca312021177572311e666

    • SHA1

      ea77332d7779938ae8e92ad35d6dea4f4be37a92

    • SHA256

      af42a17d428c8e9d6f4a6d3393ec268f4d12bbfd01a897d87275482a45c847e9

    • SHA512

      09366608f2670d2eb0e8ddcacd081a7b2d7b680c4cdd02494d08821dbdf17595b30e88f6ce0888591592e7caa422414a895846a268fd63e8243074972c9f52d8

    Score
    3/10
    behavioral1behavioral2

    • Target

      8xyz8/8xyz8/ReadMe.txt

    • Size

      2KB

    • MD5

      8dbe87a9bf6342c4e2ea406fa86e76bb

    • SHA1

      35fe083b3f5793fe1b803d091262e4dee2cd0c4d

    • SHA256

      d3b0219253a58ccb394559751299bd16dba1120e02cb11571c3b6a085b1027f8

    • SHA512

      3fca076f1c6fe286bef4d211fad2643e2c2e426d75e665c1a1c8dd241689fbd3911544b90f65e0b2ab25ce0ff63fc5520684ff7c1c2fb71be9cda6359a8b1c8e

    Score
    1/10
    behavioral3behavioral4

    • Target

      8xyz8/8xyz8/dControl.exe

    • Size

      447KB

    • MD5

      58008524a6473bdf86c1040a9a9e39c3

    • SHA1

      cb704d2e8df80fd3500a5b817966dc262d80ddb8

    • SHA256

      1ef6c1a4dfdc39b63bfe650ca81ab89510de6c0d3d7c608ac5be80033e559326

    • SHA512

      8cf492584303523bf6cdfeb6b1b779ee44471c91e759ce32fd4849547b6245d4ed86af5b38d1c6979729a77f312ba91c48207a332ae1589a6e25de67ffb96c31

    • SSDEEP

      6144:Vzv+kSn74iCmfianQGDM3OXTWRDy9GYQDUmJFXIXHrsUBnBTF8JJCYrYNsQJzfgu:Vzcn7EanlQiWtYhmJFSwUBLcQZfgiD

    Score
    10/10
    evasiontrojanupx

    • Modifies security service

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

    behavioral5behavioral6

    • Target

      out.upx

    • Size

      653KB

    • MD5

      6970ea0b6597dcd5b4f5f19f28e958a8

    • SHA1

      a0130bb7ac03ec4799c90781ca93fd1392c6d54c

    • SHA256

      481e03978ca339ce697252895efe89b09fefd3098ad247d24eeb6cca9969f553

    • SHA512

      bc95cbe9a050e3d3b713745ef399bf2817d38f8e019f6edffdd2bf755badbde766e434e39a7f32356125bba0692b694c18da8dd0762aac0c9430d45acb215e01

    • SSDEEP

      12288:nkxDoouVA2nxKkhEvdRgQriDJOIlW+yBGQowlNCWS:RRmJkioQrilOIc+yMx

    Score
    1/10
    behavioral7behavioral8

    • Target

      8xyz8/8xyz8/dControl.ini

    • Size

      85KB

    • MD5

      05450ff06366ae22654b63a6e27d1624

    • SHA1

      11453c370f41287fb6339e509bb9d3c91842b379

    • SHA256

      8e9a84da243905685ca77b6ef71841e610b88b7963d4de59f6dcbdd1621ecacd

    • SHA512

      ee0a9605b566aa89c8c9b260e1d9c15aecbd6cddc2df47fe24ef2cafbe8923b3e025bd5cd3d34499292589a3c094dd796ab4560c8099bad2051a54928c37b4b2

    • SSDEEP

      768:i/G+NmPfjsxaxdk2akexodULxEQq1wIgC+AEbSr6:1+NyjsxkKdkJdULgbWSO

    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks