Overview

overview

10

Static

static

3

de7eeb4fe9...ee.exe

windows7-x64

10

de7eeb4fe9...ee.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de7eeb4fe94f3780069e65235e6f21ee

  • Size

    324KB

  • Sample

    240325-vgwgbade38

  • MD5

    de7eeb4fe94f3780069e65235e6f21ee

  • SHA1

    0de2272549162fec81f59a0a8e915a0a9ac79b60

  • SHA256

    e82e133b5ee167a73e626f133cbde918bb3a3753946c9c7809d9d89020be8d76

  • SHA512

    dec6b609b7364728bb33d4200ce202b3e6781d9a97e06baf18370b4ca2d6476c994d0cda61d73f650537fc7f69bd203b6238eb085ca05e532fb3920aee53238d

  • SSDEEP

    3072:yDGhJvwtLiiJPH1Q19f4tZMQflYPNLK8VZQ3oe978H0fQeQC8gOTc4asFHDz+2Rf:Nw+9sfofH4aCAUsFHDNO8eyifrru

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      de7eeb4fe94f3780069e65235e6f21ee

    • Size

      324KB

    • MD5

      de7eeb4fe94f3780069e65235e6f21ee

    • SHA1

      0de2272549162fec81f59a0a8e915a0a9ac79b60

    • SHA256

      e82e133b5ee167a73e626f133cbde918bb3a3753946c9c7809d9d89020be8d76

    • SHA512

      dec6b609b7364728bb33d4200ce202b3e6781d9a97e06baf18370b4ca2d6476c994d0cda61d73f650537fc7f69bd203b6238eb085ca05e532fb3920aee53238d

    • SSDEEP

      3072:yDGhJvwtLiiJPH1Q19f4tZMQflYPNLK8VZQ3oe978H0fQeQC8gOTc4asFHDz+2Rf:Nw+9sfofH4aCAUsFHDNO8eyifrru

    Score
    10/10
    evasionpersistenceupx

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks