Overview

overview

8

Static

static

1

9eb4fa68e9...ef.dll

windows7-x64

7

9eb4fa68e9...ef.dll

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9eb4fa68e9d7310165f1ddeeecac888d62533ee6f1fe5637d212eb5b04e173ef

  • Size

    223KB

  • Sample

    240527-kzcrtafd58

  • MD5

    539766c71997250a61ed114739b9cc09

  • SHA1

    5b71160546eb82edbf807065bf200dcef86c51e9

  • SHA256

    9eb4fa68e9d7310165f1ddeeecac888d62533ee6f1fe5637d212eb5b04e173ef

  • SHA512

    8b7e14ec48916720a1446eb26d9ee31505cccb144d7b42fd372e4bbcb57b5e56ca56405f5c0cd66bb9cc8336965438f0e026ec9517dc0147830b06179db8f54d

  • SSDEEP

    3072:6huf5AUWGIcvZAK2agufAnAZdlGZxIOtY81fs2lQBV+UdE+rECWp7hK+m:ZBAUWGxAVagufYLIBV+UdvrEFp7hKL

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      9eb4fa68e9d7310165f1ddeeecac888d62533ee6f1fe5637d212eb5b04e173ef

    • Size

      223KB

    • MD5

      539766c71997250a61ed114739b9cc09

    • SHA1

      5b71160546eb82edbf807065bf200dcef86c51e9

    • SHA256

      9eb4fa68e9d7310165f1ddeeecac888d62533ee6f1fe5637d212eb5b04e173ef

    • SHA512

      8b7e14ec48916720a1446eb26d9ee31505cccb144d7b42fd372e4bbcb57b5e56ca56405f5c0cd66bb9cc8336965438f0e026ec9517dc0147830b06179db8f54d

    • SSDEEP

      3072:6huf5AUWGIcvZAK2agufAnAZdlGZxIOtY81fs2lQBV+UdE+rECWp7hK+m:ZBAUWGxAVagufYLIBV+UdvrEFp7hKL

    Score
    8/10
    upxpersistence

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks