Overview

overview

10

Static

static

7

2f5d4fa1d8...00.exe

windows7-x64

10

2f5d4fa1d8...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f5d4fa1d8177d83097661cbfa7c1d3a2016911e85de8d68cdc978400a7abb00.exe

  • Size

    51KB

  • Sample

    240522-xvkcbadb5s

  • MD5

    152838cbbd91f25d77b6407eecfe2120

  • SHA1

    18b5b35534cb8be9ba7f1d792f76ab37943eba8c

  • SHA256

    2f5d4fa1d8177d83097661cbfa7c1d3a2016911e85de8d68cdc978400a7abb00

  • SHA512

    7ff991dfcb724cc7f6587f9641add87ccaf3b38617f4a852f1267e798b98c5852b507e4898738f486de18ee5e1c1bd5ad9f64fcf3d1c8d675cc080e8d080440f

  • SSDEEP

    768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3k:nNJb/HkwoLe29UjQ4wqQOLIMVnS3k

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      2f5d4fa1d8177d83097661cbfa7c1d3a2016911e85de8d68cdc978400a7abb00.exe

    • Size

      51KB

    • MD5

      152838cbbd91f25d77b6407eecfe2120

    • SHA1

      18b5b35534cb8be9ba7f1d792f76ab37943eba8c

    • SHA256

      2f5d4fa1d8177d83097661cbfa7c1d3a2016911e85de8d68cdc978400a7abb00

    • SHA512

      7ff991dfcb724cc7f6587f9641add87ccaf3b38617f4a852f1267e798b98c5852b507e4898738f486de18ee5e1c1bd5ad9f64fcf3d1c8d675cc080e8d080440f

    • SSDEEP

      768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3k:nNJb/HkwoLe29UjQ4wqQOLIMVnS3k

    Score
    10/10
    evasionpersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks