Overview

overview

8

Static

static

1

Crc_Calcul..._2.zip

windows11-21h2-x64

Resubmissions

07/03/2024, 22:37

240307-2j96taha3y 8

07/03/2024, 22:33

240307-2gjk3sgh4x 7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Crc_Calculator_1_2.zip

  • Size

    137KB

  • Sample

    240307-2j96taha3y

  • MD5

    9555805a06d091dfa4c06330044fac15

  • SHA1

    42e1945533af6319fe7d6b8dc318949ecec58cbc

  • SHA256

    e7b6e20e2891964d2a2dcc3810e9e79fb2f0d986e162840d2ca8f0422f2cee39

  • SHA512

    f58d368e0d610f38c31b44d946ac42f07a1afdd11a042f04554b1dcbb999b8e03a4ecc1dc849d639f0afea9be10d08617ff99c54a92232b4c0cdb34f6adeea6d

  • SSDEEP

    3072:v00msv83beqsWDqFRYyg2SXCoSGR1jeLOj:M0mnLeqm43P4LO

Score
8/10
discoveryupx

Malware Config

Targets

    • Target

      Crc_Calculator_1_2.zip

    • Size

      137KB

    • MD5

      9555805a06d091dfa4c06330044fac15

    • SHA1

      42e1945533af6319fe7d6b8dc318949ecec58cbc

    • SHA256

      e7b6e20e2891964d2a2dcc3810e9e79fb2f0d986e162840d2ca8f0422f2cee39

    • SHA512

      f58d368e0d610f38c31b44d946ac42f07a1afdd11a042f04554b1dcbb999b8e03a4ecc1dc849d639f0afea9be10d08617ff99c54a92232b4c0cdb34f6adeea6d

    • SSDEEP

      3072:v00msv83beqsWDqFRYyg2SXCoSGR1jeLOj:M0mnLeqm43P4LO

    Score
    8/10
    discoveryupx

    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks