Overview

overview

9

Static

static

1

0de6090d0e...4f.exe

windows7-x64

9

0de6090d0e...4f.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0de6090d0e9a239179865d92a94479e5945b5289603c2cf234799b2d142ca34f

  • Size

    228KB

  • Sample

    240312-v7zawsha94

  • MD5

    1c449c92db035bf634b9be52c8fcd4ca

  • SHA1

    6f10a7d948fe4f222b5da2465d1c9a9e8463f481

  • SHA256

    0de6090d0e9a239179865d92a94479e5945b5289603c2cf234799b2d142ca34f

  • SHA512

    787be19d709a292c709207db25b50d17b9db0e49005d9dc2757dc38d5afc9c7b2eca6332cb05e507798123cb1022daecd5b2f9ad2d37ee6129c243ef720cb35f

  • SSDEEP

    6144:t22dvVwTLO3qwC+7Fjjv/BV+UdvrEFp7hKf:t2IvVwTi33/BjvrEH7Q

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      0de6090d0e9a239179865d92a94479e5945b5289603c2cf234799b2d142ca34f

    • Size

      228KB

    • MD5

      1c449c92db035bf634b9be52c8fcd4ca

    • SHA1

      6f10a7d948fe4f222b5da2465d1c9a9e8463f481

    • SHA256

      0de6090d0e9a239179865d92a94479e5945b5289603c2cf234799b2d142ca34f

    • SHA512

      787be19d709a292c709207db25b50d17b9db0e49005d9dc2757dc38d5afc9c7b2eca6332cb05e507798123cb1022daecd5b2f9ad2d37ee6129c243ef720cb35f

    • SSDEEP

      6144:t22dvVwTLO3qwC+7Fjjv/BV+UdvrEFp7hKf:t2IvVwTi33/BjvrEH7Q

    Score
    9/10
    upxpersistence

    • UPX dump on OEP (original entry point)

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks