Overview

overview

9

Static

static

3

a876409c00...45.exe

windows7-x64

9

a876409c00...45.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a876409c0081037f2721340e37a9e0a2fe4c2a7f36e0dfe1dd83c56760551545

  • Size

    3.1MB

  • Sample

    240319-3ex65aad75

  • MD5

    d9f046f104082dfca80e0d66adcd8748

  • SHA1

    b55137c9444fd559c4d9a922ffd70c2e78a861d8

  • SHA256

    a876409c0081037f2721340e37a9e0a2fe4c2a7f36e0dfe1dd83c56760551545

  • SHA512

    8d5fbac7082ae07903c8a88b965d6ac0590c70090cb73fa4d110c9c67bca800176f9d4fed2852485dd1bbed41b17085415d538f2bc69a3a717860a884bad5fc1

  • SSDEEP

    98304:LQBQuoTcsO0eBhrIgdx/objwHj1X1VEHYXBdS+fnJXXXXP9:LQBQuwu/nHj1lu4XBdS+l9

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      a876409c0081037f2721340e37a9e0a2fe4c2a7f36e0dfe1dd83c56760551545

    • Size

      3.1MB

    • MD5

      d9f046f104082dfca80e0d66adcd8748

    • SHA1

      b55137c9444fd559c4d9a922ffd70c2e78a861d8

    • SHA256

      a876409c0081037f2721340e37a9e0a2fe4c2a7f36e0dfe1dd83c56760551545

    • SHA512

      8d5fbac7082ae07903c8a88b965d6ac0590c70090cb73fa4d110c9c67bca800176f9d4fed2852485dd1bbed41b17085415d538f2bc69a3a717860a884bad5fc1

    • SSDEEP

      98304:LQBQuoTcsO0eBhrIgdx/objwHj1X1VEHYXBdS+fnJXXXXP9:LQBQuwu/nHj1lu4XBdS+l9

    Score
    9/10
    upxpersistence

    • UPX dump on OEP (original entry point)

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks