Overview

overview

9

Static

static

3

76db198c57...ef.exe

windows7-x64

9

76db198c57...ef.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    76db198c57445a9ebe38eb0fcc9e12fa419cbb12ce92c8b3fb97f102adc0d4ef

  • Size

    213KB

  • Sample

    240416-3wlvesfh52

  • MD5

    fee3f9439f943a1e4943cfafb1a69a6d

  • SHA1

    8f5f82cbfd364374f1ab5b66e3d8d6a9f5326822

  • SHA256

    76db198c57445a9ebe38eb0fcc9e12fa419cbb12ce92c8b3fb97f102adc0d4ef

  • SHA512

    c6e25a618989dc2002e13d2a40fb2436c1fdaeaf5c8689ab7bb778a8612bf4759daaac6c17d7e549f32d4827686eab24aaa14cd0030aaa53b1d4fcd6d4909f18

  • SSDEEP

    6144:zwadQ6mCtnRPF9cCGr/uHkBV+UdvrEFp7hKO6:zwqnRNh4uHkBjvrEH7F6

Score
9/10
upx

Malware Config

Targets

    • Target

      76db198c57445a9ebe38eb0fcc9e12fa419cbb12ce92c8b3fb97f102adc0d4ef

    • Size

      213KB

    • MD5

      fee3f9439f943a1e4943cfafb1a69a6d

    • SHA1

      8f5f82cbfd364374f1ab5b66e3d8d6a9f5326822

    • SHA256

      76db198c57445a9ebe38eb0fcc9e12fa419cbb12ce92c8b3fb97f102adc0d4ef

    • SHA512

      c6e25a618989dc2002e13d2a40fb2436c1fdaeaf5c8689ab7bb778a8612bf4759daaac6c17d7e549f32d4827686eab24aaa14cd0030aaa53b1d4fcd6d4909f18

    • SSDEEP

      6144:zwadQ6mCtnRPF9cCGr/uHkBV+UdvrEFp7hKO6:zwqnRNh4uHkBjvrEH7F6

    Score
    9/10
    upx

    • UPX dump on OEP (original entry point)

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks