Overview

overview

9

Static

static

3

532c9475c5...c0.exe

windows7-x64

9

532c9475c5...c0.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    532c9475c54e38bf156e9832f784be442e372428efb9920f4dcac0e722dc1bc0.exe

  • Size

    1.8MB

  • Sample

    240523-bwzmqsgf51

  • MD5

    3a63a81a00f53dd4395c50ec432b182e

  • SHA1

    591f1577dfdc0c3b272d54d0c95121b739ccf886

  • SHA256

    532c9475c54e38bf156e9832f784be442e372428efb9920f4dcac0e722dc1bc0

  • SHA512

    ca04d4be3d4beb43037c0dc4a7264b63db7ec3d21d6eb4340418fd3cb320d631e40cd6cd6659dc3e176e1b4e1d2327384c5a7a56ddb5880efbe690d3cc15a005

  • SSDEEP

    49152:BWNWvJ/aS8JCfmIa2Wtu5800SjRoCOAzU:BWMvJ/gsiSllO2

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      532c9475c54e38bf156e9832f784be442e372428efb9920f4dcac0e722dc1bc0.exe

    • Size

      1.8MB

    • MD5

      3a63a81a00f53dd4395c50ec432b182e

    • SHA1

      591f1577dfdc0c3b272d54d0c95121b739ccf886

    • SHA256

      532c9475c54e38bf156e9832f784be442e372428efb9920f4dcac0e722dc1bc0

    • SHA512

      ca04d4be3d4beb43037c0dc4a7264b63db7ec3d21d6eb4340418fd3cb320d631e40cd6cd6659dc3e176e1b4e1d2327384c5a7a56ddb5880efbe690d3cc15a005

    • SSDEEP

      49152:BWNWvJ/aS8JCfmIa2Wtu5800SjRoCOAzU:BWMvJ/gsiSllO2

    Score
    9/10
    persistenceupx

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks