Overview

overview

9

Static

static

3

047ded5c75...0a.exe

windows7-x64

9

047ded5c75...0a.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    047ded5c7549a9f9179b77581d1b86e14630fdb6541787c6607532a6e1169d0a

  • Size

    345KB

  • Sample

    240310-v3rp9ahd6t

  • MD5

    398e8c7e0393940ea16974aa304ee5ef

  • SHA1

    5b41749c95f425fa0d5013b879ccbe58f06c0aaf

  • SHA256

    047ded5c7549a9f9179b77581d1b86e14630fdb6541787c6607532a6e1169d0a

  • SHA512

    c526703f3a20ee4171777b1af44f16462e9b87d0d973c97bd44e372df9aab4f90be8f9ad9e039a23da579cf609d303a4a593b9dc83b1e3df082524e3daa8405f

  • SSDEEP

    6144:a6M5MRHIJ9XrrZTWdZj2iuOYXmwn+GcyBaBwhQuPZQ1IJuMCJqXVw/P85A4s6VF:5wXoD26FsVaBYQa3XVyQVVF

Score
9/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      047ded5c7549a9f9179b77581d1b86e14630fdb6541787c6607532a6e1169d0a

    • Size

      345KB

    • MD5

      398e8c7e0393940ea16974aa304ee5ef

    • SHA1

      5b41749c95f425fa0d5013b879ccbe58f06c0aaf

    • SHA256

      047ded5c7549a9f9179b77581d1b86e14630fdb6541787c6607532a6e1169d0a

    • SHA512

      c526703f3a20ee4171777b1af44f16462e9b87d0d973c97bd44e372df9aab4f90be8f9ad9e039a23da579cf609d303a4a593b9dc83b1e3df082524e3daa8405f

    • SSDEEP

      6144:a6M5MRHIJ9XrrZTWdZj2iuOYXmwn+GcyBaBwhQuPZQ1IJuMCJqXVw/P85A4s6VF:5wXoD26FsVaBYQa3XVyQVVF

    Score
    9/10
    evasionpersistenceupx

    • UPX dump on OEP (original entry point)

    • Disables Task Manager via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks