Overview

overview

10

Static

static

10

e127183ade...f0.exe

windows7-x64

10

e127183ade...f0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e127183ade662824c13af2bbdffa29906c1e286a0e42803bc9b58129202880f0

  • Size

    116KB

  • Sample

    240502-fce67shb5y

  • MD5

    d3d66f2a3bb19aa947890ceca98fe86d

  • SHA1

    66563d03bb6cbac738818016d603cd51c389b092

  • SHA256

    e127183ade662824c13af2bbdffa29906c1e286a0e42803bc9b58129202880f0

  • SHA512

    4479bcc46c5a807545e66c34af04a9079abfc1119edd54442fbd19e5a0a853ace2ebaf1bf9e33deec857bc1059c152663c5fcb612ede7a06902cabd3c798b962

  • SSDEEP

    1536:Uvm1Fu8AjYaFwjRnVaiszi/ABs4jRiupiDN5OGADzVgQ19/RfTO0UiDH1H:vu8ANC4qABsaRm5OdDxxvLHUo

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      e127183ade662824c13af2bbdffa29906c1e286a0e42803bc9b58129202880f0

    • Size

      116KB

    • MD5

      d3d66f2a3bb19aa947890ceca98fe86d

    • SHA1

      66563d03bb6cbac738818016d603cd51c389b092

    • SHA256

      e127183ade662824c13af2bbdffa29906c1e286a0e42803bc9b58129202880f0

    • SHA512

      4479bcc46c5a807545e66c34af04a9079abfc1119edd54442fbd19e5a0a853ace2ebaf1bf9e33deec857bc1059c152663c5fcb612ede7a06902cabd3c798b962

    • SSDEEP

      1536:Uvm1Fu8AjYaFwjRnVaiszi/ABs4jRiupiDN5OGADzVgQ19/RfTO0UiDH1H:vu8ANC4qABsaRm5OdDxxvLHUo

    Score
    10/10
    evasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • UPX dump on OEP (original entry point)

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks