Overview

overview

7

Static

static

7

02396c8d0b...a5.exe

windows7-x64

7

02396c8d0b...a5.exe

windows10-2004-x64

7

3fe0c0ed2c...d3.exe

windows7-x64

7

3fe0c0ed2c...d3.exe

windows10-2004-x64

7

a1be538f4b...20.exe

windows7-x64

1

a1be538f4b...20.exe

windows10-2004-x64

1

aaa70c51d1...c1.exe

windows7-x64

1

aaa70c51d1...c1.exe

windows10-2004-x64

1

c08bd0d437...2c.exe

windows7-x64

7

c08bd0d437...2c.exe

windows10-2004-x64

5

e6a7f5cc7c...e5.exe

windows7-x64

1

e6a7f5cc7c...e5.exe

windows10-2004-x64

1

fc5a6fa814...e0.exe

windows7-x64

5

fc5a6fa814...e0.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7x.rar

  • Size

    16.3MB

  • Sample

    240409-q46hksgf48

  • MD5

    f4d46dc40cbf3ed37fbc5265b3693f9c

  • SHA1

    f0299857f71cf8888d29482e5ff37bd9eb78318a

  • SHA256

    7de1a314fffec5754d068c873def3e86dfb3f202059b3579128a9912eb75b62d

  • SHA512

    751e287ea0924b4759ce170e2c14659f9c810a8b0b72499b2d883d8fcdd967efee2680ba3411f1facee849f2a61dfb24def1338f2c071798b0413ec5598723d5

  • SSDEEP

    393216:f5hz+N7p1neUyb4STJfIeFoDrB37Ms2nQX93i9vP:RQfCb1Jf0fBAVnQN3KvP

Score
7/10
upx

Malware Config

Targets

    • Target

      02396c8d0ba705e42e0a4f1a7b8e151c5093910346746546104d88e81e7e22a5.exe.vir

    • Size

      8.1MB

    • MD5

      cac17fe5ebebfe851a9c9671ec2bbaca

    • SHA1

      efe73a9e3c2c3dd2f7293b81d158249a4d963ebe

    • SHA256

      46be2e0c81fc516a6076789930c53a29471fcc7fd184cdf878b2da5c2c517cac

    • SHA512

      9ec7ce05dd6dc7c521e759a7e40ed477b2e3ae6ec69c84ad8d4f37d48a471bdd0e02bd90b889689343b43330bfd5a98287c189f37515e91c53d0153347be0d89

    • SSDEEP

      49152:omf8odH3hb0t/XrpZi9qiijrsfGWhMBFvQALfmJlI0+s8KuqGaX0ToIBAUZLY6g:z8mXcpZQqDjwfhU9mJlI3JBAUZLq

    Score
    7/10
    upx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      3fe0c0ed2cd4ebd556ba5af53d782796a7064a3cb2eb8759d87722c0b417afd3.exe.vir

    • Size

      568KB

    • MD5

      35e06be7915931f50ae9518b9b024d4b

    • SHA1

      f80bd7ea7f09e374d86bef22d9a01f7ab91eb23e

    • SHA256

      3fe0c0ed2cd4ebd556ba5af53d782796a7064a3cb2eb8759d87722c0b417afd3

    • SHA512

      215a60d6aa1562a776ab0098d51391bcd3f97b352831ef6499f6ea6b357e48ae6c49d13918a17868274d7d91b4e74a6f33379c0b872c9b7e26e8f98c8d88be56

    • SSDEEP

      12288:PozGdX0M4ornOmZIzfMwHHQmRROXK23QcaLVsmdvx:P4GHnhIzOa23QHV9

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral3behavioral4

    • Target

      a1be538f4beada0a6fafe201707e8e76cb67ac9f303def2a0e515ef687c2b220.exe.vir

    • Size

      2.2MB

    • MD5

      b8ff2878ae5f9d433bac23424b468142

    • SHA1

      c41befb4003f6d0a9dad0bb579cd84060ebae223

    • SHA256

      a1be538f4beada0a6fafe201707e8e76cb67ac9f303def2a0e515ef687c2b220

    • SHA512

      ee82dc63f4de3e995e734bd45103f3dbf0e905d2fa1922415421d00f4c89201fdcc295be4fb4b12da9ddb4c635ddd7998667731b75083beb623adec328fea01c

    • SSDEEP

      49152:2Jb0s7+ab/l85yCeQb/VLSKFAnmEAaRR9mXhW6jIWsS0mW+2:wW8yJeo/VLSKFAnNV9QWeIWjI+2

    Score
    1/10
    behavioral5behavioral6

    • Target

      aaa70c51d115bfe403c7bdfe7f9c7bcec44ba26854d8921f8d599ada8dd270c1.exe.vir

    • Size

      4.2MB

    • MD5

      a3fa0d5a99e552c052d7d589fedbcdc3

    • SHA1

      eae7c71fc63253ef44855fb041503f743c084b0b

    • SHA256

      aaa70c51d115bfe403c7bdfe7f9c7bcec44ba26854d8921f8d599ada8dd270c1

    • SHA512

      2a909ae0c3d7fff595ac1b3f64c1af3b551662ffa660360a40c433a3b47dad6c4789c2a040c0e9a5ffe37ee7907b46e7427de630c7cd63964a90eb384ab93fed

    • SSDEEP

      49152:0MNk0mbfTS1WI6SBhQ0h37Ox6et+FyIN6oYjn5EoZS8O5G:J3mnS1WIDQ0hHet+FyII9EKhp

    Score
    1/10
    behavioral7behavioral8

    • Target

      c08bd0d4371509ff105c0988e2dec26c483df4a8ed2998715a90dd273fd2662c.exe.vir

    • Size

      8.4MB

    • MD5

      f8dc7e39b1be8fe53799461534723d99

    • SHA1

      f56a290dbbdaaa2c6b236290fb9540b2a39b1598

    • SHA256

      c08bd0d4371509ff105c0988e2dec26c483df4a8ed2998715a90dd273fd2662c

    • SHA512

      a4866d72be59a6b4dfaf3458dcb44f379f708c762609a12575cc9383597f64f2fd166603ad2ba393e587d196fa25b644047bc2c5aa98046f4bf8f169ee995ed1

    • SSDEEP

      196608:isIdIqFdRxn+tes2nmMG/Orx4Cvb3cuGKjSxI0lS9:Eze2tjrxHr7GASxIAc

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral10behavioral9

    • Target

      e6a7f5cc7c08e6150cadf8764b03e658e7a1cf53b06e240406703df1d50d06e5.exe.vir

    • Size

      2.9MB

    • MD5

      0bd3c19b266ee6f55ffe7c146e27c89a

    • SHA1

      350efaf629b9f308c4da1b926ec5579af19c2c69

    • SHA256

      e6a7f5cc7c08e6150cadf8764b03e658e7a1cf53b06e240406703df1d50d06e5

    • SHA512

      27eee140f15cb323b5a902b5cfe0a6a813859e6a01c41f1da06e3437691bd6195e44c7ba49591feb80e1dbd02a1ad6f7fc1cf1bb958fe6e54ec7511e2bb61c0c

    • SSDEEP

      24576:eq2+JhvfgaxHYWdvQpIOobY/ESoCMj+k59yjRggtDOSD4wUBcyS8K1zxqyU71fEv:++JCO4WjOZ/wxjn5EAZS8V5K

    Score
    1/10
    behavioral11behavioral12

    • Target

      fc5a6fa814dbc5e41f844b511c9c83ec5a576fc14ef92ac7925b6b56940a40e0.exe.vir

    • Size

      3.0MB

    • MD5

      1f1b5c776eeafbce36a7feafc20c4cb5

    • SHA1

      8584af079c7d57f8f5c51b1737cc3ef91ab747d7

    • SHA256

      fc5a6fa814dbc5e41f844b511c9c83ec5a576fc14ef92ac7925b6b56940a40e0

    • SHA512

      ca6b4ab8440254196ef7345243aefe88fb6b274623f201d53730dd6795f654a114fa4a42eae4566383d2232d6393f47cfb9ba802f05db812d292d2ea1edf51c3

    • SSDEEP

      49152:2hn9BTD9dfTTk+xYcymNryJW2t3pYjpfO98tUChoQ0f:2h9BwVchNrytpkFW

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral13behavioral14

MITRE ATT&CK Matrix

Tasks