Overview

overview

10

Static

static

7

c64f57f9b4...8e.exe

windows7-x64

10

c64f57f9b4...8e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c64f57f9b44d5aa023d7467c15d9218e.exe

  • Size

    22KB

  • Sample

    240517-r3wsescc7x

  • MD5

    c64f57f9b44d5aa023d7467c15d9218e

  • SHA1

    d7e5749bc0f9df75c7e5f1ffad1eea6908a81b00

  • SHA256

    9e932649b42f6518a53d98e503bb409e3a13bf3ba417869c901913094e20f767

  • SHA512

    36cbf8873faf73eede168c9a4146479ca7710f03b4b7a00a1cd57cc8fb04b229ce16cc2bb930939c47556c0f109c0f5890a090a31588f5d6bf52ec6efd770506

  • SSDEEP

    384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX8Mb7a6M0:rRkiLw3HsDSARGG/MMb7rH

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      c64f57f9b44d5aa023d7467c15d9218e.exe

    • Size

      22KB

    • MD5

      c64f57f9b44d5aa023d7467c15d9218e

    • SHA1

      d7e5749bc0f9df75c7e5f1ffad1eea6908a81b00

    • SHA256

      9e932649b42f6518a53d98e503bb409e3a13bf3ba417869c901913094e20f767

    • SHA512

      36cbf8873faf73eede168c9a4146479ca7710f03b4b7a00a1cd57cc8fb04b229ce16cc2bb930939c47556c0f109c0f5890a090a31588f5d6bf52ec6efd770506

    • SSDEEP

      384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX8Mb7a6M0:rRkiLw3HsDSARGG/MMb7rH

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks