Overview

overview

7

Static

static

7

ip-tools.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ip-tools.exe

  • Size

    1.4MB

  • Sample

    240328-t422yabf77

  • MD5

    4a83348f18a18ba34f9747648b550307

  • SHA1

    29bfe72510215c55d4e6465c5058f0d821489521

  • SHA256

    a75f098ead78f71fb54baa5e97d27024f34d7e68fbae04a9f32df1424a55ecb7

  • SHA512

    23febfc86437438d85739ef6c96246287635c15d0b0f9450a472e222c1b9046213561dd5042b49a3888eff4bfea00fa9cb76465a85cd1b11dbeaa8ab70f6714f

  • SSDEEP

    24576:f8P54d7nUp+NrDeCunPLK1oSRHRDWd4PoaxDg/Xs5tnyRKB3OP+jwOvy7WEvlKo:khenUs9uPLlC4Ooaus5tnii3OWxvzMv

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      ip-tools.exe

    • Size

      1.4MB

    • MD5

      4a83348f18a18ba34f9747648b550307

    • SHA1

      29bfe72510215c55d4e6465c5058f0d821489521

    • SHA256

      a75f098ead78f71fb54baa5e97d27024f34d7e68fbae04a9f32df1424a55ecb7

    • SHA512

      23febfc86437438d85739ef6c96246287635c15d0b0f9450a472e222c1b9046213561dd5042b49a3888eff4bfea00fa9cb76465a85cd1b11dbeaa8ab70f6714f

    • SSDEEP

      24576:f8P54d7nUp+NrDeCunPLK1oSRHRDWd4PoaxDg/Xs5tnyRKB3OP+jwOvy7WEvlKo:khenUs9uPLlC4Ooaus5tnii3OWxvzMv

    Score
    7/10
    discoveryupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks