Overview

overview

10

Static

static

3

55c8ea25c5...ae.exe

windows7-x64

10

55c8ea25c5...ae.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55c8ea25c5d3eba2b8cf5d94ee0785890abc40b4ffb440ea2861ddb219a329ae

  • Size

    24KB

  • Sample

    240514-1p7gfaaa4v

  • MD5

    abf016af211ca8ec55701f57a8cb9c99

  • SHA1

    459b6294d07809592c35a61a1132f6ad959468a9

  • SHA256

    55c8ea25c5d3eba2b8cf5d94ee0785890abc40b4ffb440ea2861ddb219a329ae

  • SHA512

    d9e1244ed1501b2ba9106d0951ad55c7d0593ccc0cebb6b5a14b7526048cb6bc73bb1d9b5eb0dc4fabe1c89b6893050e4787aa76db375ec5ca6f6b5ff2f0b3f5

  • SSDEEP

    768:jIUpzzZW+0ZvPPRIKZrwQWiLzKajZU6IC:jTzkxHfhwId26IC

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      55c8ea25c5d3eba2b8cf5d94ee0785890abc40b4ffb440ea2861ddb219a329ae

    • Size

      24KB

    • MD5

      abf016af211ca8ec55701f57a8cb9c99

    • SHA1

      459b6294d07809592c35a61a1132f6ad959468a9

    • SHA256

      55c8ea25c5d3eba2b8cf5d94ee0785890abc40b4ffb440ea2861ddb219a329ae

    • SHA512

      d9e1244ed1501b2ba9106d0951ad55c7d0593ccc0cebb6b5a14b7526048cb6bc73bb1d9b5eb0dc4fabe1c89b6893050e4787aa76db375ec5ca6f6b5ff2f0b3f5

    • SSDEEP

      768:jIUpzzZW+0ZvPPRIKZrwQWiLzKajZU6IC:jTzkxHfhwId26IC

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks