General

  • Target

    dc7286adc03196ed3f6066b6ebe08b21aaff19013dc81a449695088e052fe544

  • Size

    479KB

  • Sample

    240425-erj82afb8z

  • MD5

    f12c85d12e440d7902246dc0c2a76673

  • SHA1

    10c520d085320836883cce7f32bf5128fe84fbba

  • SHA256

    dc7286adc03196ed3f6066b6ebe08b21aaff19013dc81a449695088e052fe544

  • SHA512

    c7ff370f34f5ebcd0b4f02c7049213c811b426d961c6e50a595584bccdde7f4e3d8b8e0a7926362a84dc7225a9c210d807619fc5b19b2bf8a362224377c8ce46

  • SSDEEP

    6144:l63+NDdL0yqu5uPBhLRjpML0KYj3NAilJ0FcmjUK:I+HAJ3PBh9jkK3NAi/0Fcex

Score
10/10

Malware Config

Targets

    • Target

      dc7286adc03196ed3f6066b6ebe08b21aaff19013dc81a449695088e052fe544

    • Size

      479KB

    • MD5

      f12c85d12e440d7902246dc0c2a76673

    • SHA1

      10c520d085320836883cce7f32bf5128fe84fbba

    • SHA256

      dc7286adc03196ed3f6066b6ebe08b21aaff19013dc81a449695088e052fe544

    • SHA512

      c7ff370f34f5ebcd0b4f02c7049213c811b426d961c6e50a595584bccdde7f4e3d8b8e0a7926362a84dc7225a9c210d807619fc5b19b2bf8a362224377c8ce46

    • SSDEEP

      6144:l63+NDdL0yqu5uPBhLRjpML0KYj3NAilJ0FcmjUK:I+HAJ3PBh9jkK3NAi/0Fcex

    Score
    10/10
    • Modifies visibility of file extensions in Explorer

    • UPX dump on OEP (original entry point)

    • Disables RegEdit via registry modification

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Hide Artifacts

1
T1564

Hidden Files and Directories

1
T1564.001

Modify Registry

2
T1112

Discovery

System Information Discovery

1
T1082

Tasks