Overview

overview

10

Static

static

10

456b3e76e0...e4.exe

windows7-x64

10

456b3e76e0...e4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    456b3e76e0e341fada11ee6f262ee5c1c1c626f677725257b8601779e918d1e4

  • Size

    85KB

  • Sample

    240527-1jffrscb35

  • MD5

    5a68219e041e2bd2a94c63ccc0db49ee

  • SHA1

    ff4598ef84d8111b3dcf289c851f87078f798b36

  • SHA256

    456b3e76e0e341fada11ee6f262ee5c1c1c626f677725257b8601779e918d1e4

  • SHA512

    f0f561784ac963ee49004ccbcd10cb40f2d991c25a9ad98c760cc4f95e62e67836c74aeae785d317070e92162c1783d4f60543adbb98ac870de06c9a6a57f893

  • SSDEEP

    768:8qnum1opQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEmQ:8vm1AeT7BVwxfvLFwjRQ

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      456b3e76e0e341fada11ee6f262ee5c1c1c626f677725257b8601779e918d1e4

    • Size

      85KB

    • MD5

      5a68219e041e2bd2a94c63ccc0db49ee

    • SHA1

      ff4598ef84d8111b3dcf289c851f87078f798b36

    • SHA256

      456b3e76e0e341fada11ee6f262ee5c1c1c626f677725257b8601779e918d1e4

    • SHA512

      f0f561784ac963ee49004ccbcd10cb40f2d991c25a9ad98c760cc4f95e62e67836c74aeae785d317070e92162c1783d4f60543adbb98ac870de06c9a6a57f893

    • SSDEEP

      768:8qnum1opQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEmQ:8vm1AeT7BVwxfvLFwjRQ

    Score
    10/10
    evasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • UPX dump on OEP (original entry point)

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks