Overview

overview

7

Static

static

7

e116b6ba33...ec.exe

windows7-x64

7

e116b6ba33...ec.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    e116b6ba330cdb4b9db279673ce13aec

  • Size

    3.0MB

  • Sample

    240327-h26rkaac31

  • MD5

    e116b6ba330cdb4b9db279673ce13aec

  • SHA1

    d0004202360a8147673d6f71ff5751afc22d50c3

  • SHA256

    81ff1c11e80fc37f6e4de0cb3bc0a02e99f0cf45a08c6ebc87faa62be5667cfc

  • SHA512

    8513114a732982ffcea4cb8c3f2d363b907374db9d9a13ef399130ca11c2cc97770847619656a2ef903ac44b15cc5186a76628e600a7644f0eb7d94ecb9c8b9b

  • SSDEEP

    49152:GwMrFWmv6KuVeYcakLVy5dv5sgpkB5+PcakL6dnOXfmP2DfcakLVy5dv5sgpkB5B:G/r4mv6KLYcakhy595sgp9cakOdnOXfO

Score
7/10
upx

Malware Config

Targets

    • Target

      e116b6ba330cdb4b9db279673ce13aec

    • Size

      3.0MB

    • MD5

      e116b6ba330cdb4b9db279673ce13aec

    • SHA1

      d0004202360a8147673d6f71ff5751afc22d50c3

    • SHA256

      81ff1c11e80fc37f6e4de0cb3bc0a02e99f0cf45a08c6ebc87faa62be5667cfc

    • SHA512

      8513114a732982ffcea4cb8c3f2d363b907374db9d9a13ef399130ca11c2cc97770847619656a2ef903ac44b15cc5186a76628e600a7644f0eb7d94ecb9c8b9b

    • SSDEEP

      49152:GwMrFWmv6KuVeYcakLVy5dv5sgpkB5+PcakL6dnOXfmP2DfcakLVy5dv5sgpkB5B:G/r4mv6KLYcakhy595sgp9cakOdnOXfO

    Score
    7/10
    upx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks