Overview

overview

10

Static

static

7

fffb9dc8e7...ba.exe

windows7-x64

10

fffb9dc8e7...ba.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fffb9dc8e71747e3a5a00b2e60280f4e3c794d5ef3b2e2e688427252c051acba

  • Size

    21KB

  • Sample

    240421-fve9xscd51

  • MD5

    722848a2b4c30642aa3db387a4408738

  • SHA1

    ba5044185edb021cf17a42446bb9558e55a230a9

  • SHA256

    fffb9dc8e71747e3a5a00b2e60280f4e3c794d5ef3b2e2e688427252c051acba

  • SHA512

    16cdc599fe99a12420b275743968c6d9f31b64a91fa81665381dd4b8e85270fdf6e0bf648625f49e800030866aae4d3b29212082aed5284d34d6ba56a073dc5f

  • SSDEEP

    384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX8Mb7a6cUJ:rRkiLw3HsDSARGG/MMb7rz

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      fffb9dc8e71747e3a5a00b2e60280f4e3c794d5ef3b2e2e688427252c051acba

    • Size

      21KB

    • MD5

      722848a2b4c30642aa3db387a4408738

    • SHA1

      ba5044185edb021cf17a42446bb9558e55a230a9

    • SHA256

      fffb9dc8e71747e3a5a00b2e60280f4e3c794d5ef3b2e2e688427252c051acba

    • SHA512

      16cdc599fe99a12420b275743968c6d9f31b64a91fa81665381dd4b8e85270fdf6e0bf648625f49e800030866aae4d3b29212082aed5284d34d6ba56a073dc5f

    • SSDEEP

      384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX8Mb7a6cUJ:rRkiLw3HsDSARGG/MMb7rz

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks