Overview

overview

9

Static

static

1

8b8bb430a6...43.dll

windows7-x64

9

8b8bb430a6...43.dll

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b8bb430a6d80657603d885a10ab5e311b752effd314e9d83fe46382b8068e43

  • Size

    182KB

  • Sample

    240505-b4dp8saf6v

  • MD5

    4754cbba0894419b933fb1279b4346e3

  • SHA1

    e26d15d4bda0dc042361d527092bffbca8e5f92d

  • SHA256

    8b8bb430a6d80657603d885a10ab5e311b752effd314e9d83fe46382b8068e43

  • SHA512

    7625fc3f74a585043e10f873846dabcd15162d4611bd779e6d84417f1ba46311730c3daa3c1d0bd3dba995eb79da9110e6015cfdeccc14f064724652678edfd1

  • SSDEEP

    3072:7wqDtLba/zq0et+ui1yJkt2lQBV+UdE+rECWp7hK5qyD:0qxbxJiBV+UdvrEFp7hK5qyD

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      8b8bb430a6d80657603d885a10ab5e311b752effd314e9d83fe46382b8068e43

    • Size

      182KB

    • MD5

      4754cbba0894419b933fb1279b4346e3

    • SHA1

      e26d15d4bda0dc042361d527092bffbca8e5f92d

    • SHA256

      8b8bb430a6d80657603d885a10ab5e311b752effd314e9d83fe46382b8068e43

    • SHA512

      7625fc3f74a585043e10f873846dabcd15162d4611bd779e6d84417f1ba46311730c3daa3c1d0bd3dba995eb79da9110e6015cfdeccc14f064724652678edfd1

    • SSDEEP

      3072:7wqDtLba/zq0et+ui1yJkt2lQBV+UdE+rECWp7hK5qyD:0qxbxJiBV+UdvrEFp7hK5qyD

    Score
    9/10
    persistenceupx

    • UPX dump on OEP (original entry point)

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks