Overview

overview

10

Static

static

10

df5d6ced59...b0.exe

windows7-x64

10

df5d6ced59...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df5d6ced59874766961dd97c32432eac4521ecd9dc7d5a722dcaf3b94875cbb0

  • Size

    404KB

  • Sample

    240425-ewwgvsfb23

  • MD5

    9bd961f85b985226624e682ec14f3b1e

  • SHA1

    472f2d18c186bb16ed801c4ed974bdf2cab0d917

  • SHA256

    df5d6ced59874766961dd97c32432eac4521ecd9dc7d5a722dcaf3b94875cbb0

  • SHA512

    80b465495cb956497a33ac9bfa4234ca15c3403a691312e4d53f7619b847f5394c62a7d43802d62f092779eac86d80d88531c581afcbc58b0c66aa1f27bf69ab

  • SSDEEP

    3072:/u8ANCMu8ANCHu8ANCgu8ANCqu8ANC8u8ANC3u8ANCmu8ANCIu8ANCju8ANCz:GvNyvNhvNuvNAvNivNRvN0vNWvN1vNc

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      df5d6ced59874766961dd97c32432eac4521ecd9dc7d5a722dcaf3b94875cbb0

    • Size

      404KB

    • MD5

      9bd961f85b985226624e682ec14f3b1e

    • SHA1

      472f2d18c186bb16ed801c4ed974bdf2cab0d917

    • SHA256

      df5d6ced59874766961dd97c32432eac4521ecd9dc7d5a722dcaf3b94875cbb0

    • SHA512

      80b465495cb956497a33ac9bfa4234ca15c3403a691312e4d53f7619b847f5394c62a7d43802d62f092779eac86d80d88531c581afcbc58b0c66aa1f27bf69ab

    • SSDEEP

      3072:/u8ANCMu8ANCHu8ANCgu8ANCqu8ANC8u8ANC3u8ANCmu8ANCIu8ANCju8ANCz:GvNyvNhvNuvNAvNivNRvN0vNWvN1vNc

    Score
    10/10
    evasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

1
T1564

Hidden Files and Directories

1
T1564.001

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks