Overview

overview

7

Static

static

7

e1040e4083...c5.exe

windows7-x64

7

e1040e4083...c5.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    e1040e40837097c963f58c9c83e12ec5

  • Size

    161KB

  • Sample

    240327-hfz2wsef94

  • MD5

    e1040e40837097c963f58c9c83e12ec5

  • SHA1

    4c87cd78490dd9d7e829a190b2296d1d2a68820d

  • SHA256

    75b2a1f2ab9c521f0af20d9a74cb422b4ae12995a6dcffe2d629e461f10b3f19

  • SHA512

    5d8b4ab3945b0805faebbddbd92f1b9d70e8e9df28be27a48e7288abb653237a2fa19061977f9402cfa11b405c403f53922f3c6f8bafdd6014a4dba9d439928b

  • SSDEEP

    3072:a1mDHCjYBNCERkjlK7Xa3mUrvwF+OPgAwVbAtOP+uLXD8Ku7IhhV6:FOjkCE/a3mmvwFavV/L4Kq4e

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      e1040e40837097c963f58c9c83e12ec5

    • Size

      161KB

    • MD5

      e1040e40837097c963f58c9c83e12ec5

    • SHA1

      4c87cd78490dd9d7e829a190b2296d1d2a68820d

    • SHA256

      75b2a1f2ab9c521f0af20d9a74cb422b4ae12995a6dcffe2d629e461f10b3f19

    • SHA512

      5d8b4ab3945b0805faebbddbd92f1b9d70e8e9df28be27a48e7288abb653237a2fa19061977f9402cfa11b405c403f53922f3c6f8bafdd6014a4dba9d439928b

    • SSDEEP

      3072:a1mDHCjYBNCERkjlK7Xa3mUrvwF+OPgAwVbAtOP+uLXD8Ku7IhhV6:FOjkCE/a3mmvwFavV/L4Kq4e

    Score
    7/10
    persistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks