Overview

overview

9

Static

static

3

e22815aaf6...89.exe

windows7-x64

9

e22815aaf6...89.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e22815aaf6a1c0a2fe9553bc86104489

  • Size

    3.7MB

  • Sample

    240327-vh77hage62

  • MD5

    e22815aaf6a1c0a2fe9553bc86104489

  • SHA1

    41a7be6756cc0c5edd78089377a415afb9b2700b

  • SHA256

    1543bc35e94d93af409716cda90b0a0d47421e912e56c05dfeb5232e03e5bd5d

  • SHA512

    86cad336a40ad52f803990e19a6d9bb5db7becf9514d228c623ba6622de70fc7b36a536d403220c32abce7bea3d5d248efe6f84456c8c6d64281f0deca65ed89

  • SSDEEP

    98304:2RkqJ7k90OgMGgZgShlYCMKbL5heF5shwqNi4ld5DJ6Nq:2RkqJI90/MGgZgS/btheHshwqNiMJ6Nq

Score
9/10
evasionupx

Malware Config

Targets

    • Target

      e22815aaf6a1c0a2fe9553bc86104489

    • Size

      3.7MB

    • MD5

      e22815aaf6a1c0a2fe9553bc86104489

    • SHA1

      41a7be6756cc0c5edd78089377a415afb9b2700b

    • SHA256

      1543bc35e94d93af409716cda90b0a0d47421e912e56c05dfeb5232e03e5bd5d

    • SHA512

      86cad336a40ad52f803990e19a6d9bb5db7becf9514d228c623ba6622de70fc7b36a536d403220c32abce7bea3d5d248efe6f84456c8c6d64281f0deca65ed89

    • SSDEEP

      98304:2RkqJ7k90OgMGgZgShlYCMKbL5heF5shwqNi4ld5DJ6Nq:2RkqJI90/MGgZgS/btheHshwqNiMJ6Nq

    Score
    9/10
    evasionupx

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks