Overview

overview

9

Static

static

1

2024-04-15...ia.exe

windows7-x64

9

2024-04-15...ia.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-15_13fc695e1072bddcd2522c6e18a99d5b_floxif_mafia

  • Size

    2.5MB

  • Sample

    240415-f7lbpsfg82

  • MD5

    13fc695e1072bddcd2522c6e18a99d5b

  • SHA1

    4c56df5c995c06193cf8ddae3f421df2725bd777

  • SHA256

    ae233d94978598fb69c479b6f7cdf370a2df8f1a3b228a6d82a5ff0636104e75

  • SHA512

    9b873893d72d12b994d1d0bf9dde0c9ae0200aa7f7950d3580b7f6acf88b7e926cee690dc6ac6b2ccb9d2e1cb6ba4ea1d19d51ed4c28bfc2de3db5052ce0b15b

  • SSDEEP

    49152:KuIIKKofs2hPd2l177BTK2VbDsar1YDj5:KjPfs2hPIl1/K

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      2024-04-15_13fc695e1072bddcd2522c6e18a99d5b_floxif_mafia

    • Size

      2.5MB

    • MD5

      13fc695e1072bddcd2522c6e18a99d5b

    • SHA1

      4c56df5c995c06193cf8ddae3f421df2725bd777

    • SHA256

      ae233d94978598fb69c479b6f7cdf370a2df8f1a3b228a6d82a5ff0636104e75

    • SHA512

      9b873893d72d12b994d1d0bf9dde0c9ae0200aa7f7950d3580b7f6acf88b7e926cee690dc6ac6b2ccb9d2e1cb6ba4ea1d19d51ed4c28bfc2de3db5052ce0b15b

    • SSDEEP

      49152:KuIIKKofs2hPd2l177BTK2VbDsar1YDj5:KjPfs2hPIl1/K

    Score
    9/10
    persistenceupx

    • UPX dump on OEP (original entry point)

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks