Overview

overview

10

Static

static

10

f17c235aad...b1.exe

windows7-x64

10

f17c235aad...b1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f17c235aad5c25999baafc8ceba32af1abe5643189530c2e3daa7cff6cb103b1

  • Size

    82KB

  • Sample

    240425-fqvttaga3y

  • MD5

    b6c7c433d17c5c51931c13ef2c81153a

  • SHA1

    2b47b14b5713f9ed4f0da497896d49eab414563d

  • SHA256

    f17c235aad5c25999baafc8ceba32af1abe5643189530c2e3daa7cff6cb103b1

  • SHA512

    048b9bab910146bc50103c279caf2b456201ad10d5c07e43c0d9ad268580e87771c4b57dcc92d2ca0e6d024e816d25c1a52fb12d762ac52a7b3cd43be5c8c38d

  • SSDEEP

    768:2pQNwC3BESe4Vqth+0V5vKmyLylze70wi3BEme:2eT7BVwxfvEFwjRe

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      f17c235aad5c25999baafc8ceba32af1abe5643189530c2e3daa7cff6cb103b1

    • Size

      82KB

    • MD5

      b6c7c433d17c5c51931c13ef2c81153a

    • SHA1

      2b47b14b5713f9ed4f0da497896d49eab414563d

    • SHA256

      f17c235aad5c25999baafc8ceba32af1abe5643189530c2e3daa7cff6cb103b1

    • SHA512

      048b9bab910146bc50103c279caf2b456201ad10d5c07e43c0d9ad268580e87771c4b57dcc92d2ca0e6d024e816d25c1a52fb12d762ac52a7b3cd43be5c8c38d

    • SSDEEP

      768:2pQNwC3BESe4Vqth+0V5vKmyLylze70wi3BEme:2eT7BVwxfvEFwjRe

    Score
    10/10
    evasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

1
T1564

Hidden Files and Directories

1
T1564.001

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks