Overview

overview

10

Static

static

10

256194e31f...63.exe

windows7-x64

9

256194e31f...63.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    256194e31f5e3cdd00144320e30165ec54d77de265f5d959b22993b4ce124863.exe

  • Size

    659KB

  • Sample

    240528-bf9srsgh31

  • MD5

    b2c97bdc5cdba659fcc2da66d2f80a8f

  • SHA1

    812541b4d56efd804b47fdae1630b69433419320

  • SHA256

    256194e31f5e3cdd00144320e30165ec54d77de265f5d959b22993b4ce124863

  • SHA512

    013abfed445d1d1868a65a9e632759d3c600c3c334cb001f6dd527557667e1bd3e95b07d4d650c8bb83cf5ebe9f8962c9a8be0b53562c880299f0fa7776f865d

  • SSDEEP

    12288:AYV6MorX7qzuC3QHO9FQVHPF51jgc1tcpHY+etwlcjM3c0Ib9:fBXu9HGaVHotetwlcuKb9

Score
10/10
upx

Malware Config

Targets

    • Target

      256194e31f5e3cdd00144320e30165ec54d77de265f5d959b22993b4ce124863.exe

    • Size

      659KB

    • MD5

      b2c97bdc5cdba659fcc2da66d2f80a8f

    • SHA1

      812541b4d56efd804b47fdae1630b69433419320

    • SHA256

      256194e31f5e3cdd00144320e30165ec54d77de265f5d959b22993b4ce124863

    • SHA512

      013abfed445d1d1868a65a9e632759d3c600c3c334cb001f6dd527557667e1bd3e95b07d4d650c8bb83cf5ebe9f8962c9a8be0b53562c880299f0fa7776f865d

    • SSDEEP

      12288:AYV6MorX7qzuC3QHO9FQVHPF51jgc1tcpHY+etwlcjM3c0Ib9:fBXu9HGaVHotetwlcuKb9

    Score
    9/10
    upx

    • UPX dump on OEP (original entry point)

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks