Overview

overview

10

Static

static

10

599e153617...94.exe

windows7-x64

9

599e153617...94.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    599e153617b29456ad646496e8bd26261ae90534b96510179bd1b91167402394

  • Size

    551KB

  • Sample

    240522-1t5teaac81

  • MD5

    3e21cdd07dc0b8976a9e5faaa736f96e

  • SHA1

    aa5c600fe6944908a62a230182edacb78b158cd4

  • SHA256

    599e153617b29456ad646496e8bd26261ae90534b96510179bd1b91167402394

  • SHA512

    4218f814b8b619bd6fe5f5ccaf7e9826b882e4e58d496fa609b83721449647e1edbb6f6593a518f8f781ec67eb60c647d5f1e4bd556c13827633bb3c6d56d1d7

  • SSDEEP

    12288:7tKe6Zv23YLVFhBsC8iFHSs7xPY1f6HriP1Gvjc09Fz5:v6Zv2ivhBVnFys7xP86LYGvjc09r

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      599e153617b29456ad646496e8bd26261ae90534b96510179bd1b91167402394

    • Size

      551KB

    • MD5

      3e21cdd07dc0b8976a9e5faaa736f96e

    • SHA1

      aa5c600fe6944908a62a230182edacb78b158cd4

    • SHA256

      599e153617b29456ad646496e8bd26261ae90534b96510179bd1b91167402394

    • SHA512

      4218f814b8b619bd6fe5f5ccaf7e9826b882e4e58d496fa609b83721449647e1edbb6f6593a518f8f781ec67eb60c647d5f1e4bd556c13827633bb3c6d56d1d7

    • SSDEEP

      12288:7tKe6Zv23YLVFhBsC8iFHSs7xPY1f6HriP1Gvjc09Fz5:v6Zv2ivhBVnFys7xP86LYGvjc09r

    Score
    9/10
    persistenceupx

    • UPX dump on OEP (original entry point)

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks