Overview

overview

9

Static

static

3

96377d0dfe...db.exe

windows7-x64

9

96377d0dfe...db.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    96377d0dfe42ec185fd6a60e0997dd8a7b920357e20fd7377433277b2d8453db

  • Size

    418KB

  • Sample

    240419-a48pyacf6v

  • MD5

    808b6fdff4e0b407ac7861aa106534da

  • SHA1

    343dc7625e52402a120ca42b24b746c3b8455d56

  • SHA256

    96377d0dfe42ec185fd6a60e0997dd8a7b920357e20fd7377433277b2d8453db

  • SHA512

    a838c6a416ac265c3bc6c203b3302110f18f77ed45dcd3570420ea05651c78f2fe49258be0d9a03ca6bc48a50db83bc1f31672f579c59a5b6cdca307fd7e3752

  • SSDEEP

    12288:Bg0FLDzOGYJJiIeHU3qWosiP08bMDSKN1O3:B3Xy7i63Dofb3

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      96377d0dfe42ec185fd6a60e0997dd8a7b920357e20fd7377433277b2d8453db

    • Size

      418KB

    • MD5

      808b6fdff4e0b407ac7861aa106534da

    • SHA1

      343dc7625e52402a120ca42b24b746c3b8455d56

    • SHA256

      96377d0dfe42ec185fd6a60e0997dd8a7b920357e20fd7377433277b2d8453db

    • SHA512

      a838c6a416ac265c3bc6c203b3302110f18f77ed45dcd3570420ea05651c78f2fe49258be0d9a03ca6bc48a50db83bc1f31672f579c59a5b6cdca307fd7e3752

    • SSDEEP

      12288:Bg0FLDzOGYJJiIeHU3qWosiP08bMDSKN1O3:B3Xy7i63Dofb3

    Score
    9/10
    persistenceupx

    • UPX dump on OEP (original entry point)

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks