Overview

overview

9

Static

static

1

57ba703c86...84.exe

windows7-x64

9

57ba703c86...84.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57ba703c86e5582bdc04597718392217f6851be17f6d438cd6f019ad8a5e5384

  • Size

    315KB

  • Sample

    240520-2kyjeaaa43

  • MD5

    bad17c26564d187b81a55fb29eccd376

  • SHA1

    2007cb8a4c1cf2ac99e010820fe4927adb6679ba

  • SHA256

    57ba703c86e5582bdc04597718392217f6851be17f6d438cd6f019ad8a5e5384

  • SHA512

    12c9e60f7561f7a60b085722344507b160a284017eff7f07b357ca5b8085f9b008f14cd6af25f2aa560d18da4e15c45a504ef2ecea0659d4fc82b9081140e12a

  • SSDEEP

    6144:ilPk0pGVmpmpupnZ2ZuZWl+ZYPZXPWQ28Bi+g5vaRk4oPQJn6BV+UdvrEFp7hKwN:ilP9pGVmpmpupnZ2ZuZWl+ZYX7g5vUkU

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      57ba703c86e5582bdc04597718392217f6851be17f6d438cd6f019ad8a5e5384

    • Size

      315KB

    • MD5

      bad17c26564d187b81a55fb29eccd376

    • SHA1

      2007cb8a4c1cf2ac99e010820fe4927adb6679ba

    • SHA256

      57ba703c86e5582bdc04597718392217f6851be17f6d438cd6f019ad8a5e5384

    • SHA512

      12c9e60f7561f7a60b085722344507b160a284017eff7f07b357ca5b8085f9b008f14cd6af25f2aa560d18da4e15c45a504ef2ecea0659d4fc82b9081140e12a

    • SSDEEP

      6144:ilPk0pGVmpmpupnZ2ZuZWl+ZYPZXPWQ28Bi+g5vaRk4oPQJn6BV+UdvrEFp7hKwN:ilP9pGVmpmpupnZ2ZuZWl+ZYX7g5vUkU

    Score
    9/10
    persistenceupx

    • UPX dump on OEP (original entry point)

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks