Overview

overview

9

Static

static

3

2024-06-02...if.exe

windows7-x64

9

2024-06-02...if.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-02_33c8306861a00bb17a0af1b484bddaac_avoslocker_cobalt-strike_floxif

  • Size

    224KB

  • Sample

    240602-avbnvacd2z

  • MD5

    33c8306861a00bb17a0af1b484bddaac

  • SHA1

    7fbb90a440a3ea64f9969ba43432699da3c65b21

  • SHA256

    685fbf03c2b396350ebb75b21aec1619654c1d8ca7fc837f1abea5421589af3b

  • SHA512

    cc4dc58e95154e9e97607a946ef7b093388f2158b588e5abea32ccf83f3e41bc24bda6c78e4a6cdce82f97ac949ad4de2035543dd8de5336b62079526b2f3c08

  • SSDEEP

    6144:ayv2zi7ajvjOLKZH2FaLw9hH4JdBV+UdvrEFp7hK8p2:ayv2zi+jvjy9hH4JdBjvrEH7X2

Score
9/10
upx

Malware Config

Targets

    • Target

      2024-06-02_33c8306861a00bb17a0af1b484bddaac_avoslocker_cobalt-strike_floxif

    • Size

      224KB

    • MD5

      33c8306861a00bb17a0af1b484bddaac

    • SHA1

      7fbb90a440a3ea64f9969ba43432699da3c65b21

    • SHA256

      685fbf03c2b396350ebb75b21aec1619654c1d8ca7fc837f1abea5421589af3b

    • SHA512

      cc4dc58e95154e9e97607a946ef7b093388f2158b588e5abea32ccf83f3e41bc24bda6c78e4a6cdce82f97ac949ad4de2035543dd8de5336b62079526b2f3c08

    • SSDEEP

      6144:ayv2zi7ajvjOLKZH2FaLw9hH4JdBV+UdvrEFp7hK8p2:ayv2zi+jvjy9hH4JdBjvrEH7X2

    Score
    9/10
    upx

    • UPX dump on OEP (original entry point)

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks