General

  • Target

    cefe42680c5482c1a30d016773dcc9ed81aa341112618a341c64bf09f7202bf2

  • Size

    729KB

  • Sample

    240526-dp5xaade58

  • MD5

    2afacd28b82a467db9f219f263e9d0a8

  • SHA1

    37017de8a787809efd4ddca190b4da81b5bd6815

  • SHA256

    cefe42680c5482c1a30d016773dcc9ed81aa341112618a341c64bf09f7202bf2

  • SHA512

    5b863ea1d8f6be55aff88d8c81a1120d0475ecac2ab13fc703fa533564de73346518c9ad174c3cfe166b9192ad10fd3e6208fb91bd345104fd4267416dbba78d

  • SSDEEP

    12288:mGzQYR4IeaAVB6ETW82Ku8UKfdndrQwoS:m8lgaAVB6evW8UKlndr

Score
10/10
upx

Malware Config

Targets

    • Target

      cefe42680c5482c1a30d016773dcc9ed81aa341112618a341c64bf09f7202bf2

    • Size

      729KB

    • MD5

      2afacd28b82a467db9f219f263e9d0a8

    • SHA1

      37017de8a787809efd4ddca190b4da81b5bd6815

    • SHA256

      cefe42680c5482c1a30d016773dcc9ed81aa341112618a341c64bf09f7202bf2

    • SHA512

      5b863ea1d8f6be55aff88d8c81a1120d0475ecac2ab13fc703fa533564de73346518c9ad174c3cfe166b9192ad10fd3e6208fb91bd345104fd4267416dbba78d

    • SSDEEP

      12288:mGzQYR4IeaAVB6ETW82Ku8UKfdndrQwoS:m8lgaAVB6evW8UKlndr

    Score
    9/10
    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks