Overview

overview

10

Static

static

7

d9e824ace2...f4.exe

windows7-x64

10

d9e824ace2...f4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9e824ace2947698fb586c7348f660c986e642a05f7fbef46e9f5a8f6d663ef4

  • Size

    276KB

  • Sample

    240606-hqrs9sbh59

  • MD5

    2b9fd36ce5bc5df7ff7a597eae7acd01

  • SHA1

    f9dc9b46a8055dcc91821dad72460dca228a9989

  • SHA256

    d9e824ace2947698fb586c7348f660c986e642a05f7fbef46e9f5a8f6d663ef4

  • SHA512

    a705f59abedb1f0ee3a5935113d0735e97e38d3aa2f5f9f8187ebd7cdda0c4a597d1203f7ef980595f6ec72d490b3d24e55da17600b201f947bc5fd3fd5f0741

  • SSDEEP

    3072:xwcPM9Vv08oewxwcP78/k9T028qqcVz5fzsTl4dsOc6v2vTzwU+Pho86meq+FaSj:HPiZ08WHPEcT93PiY+Fa7BdvG

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      d9e824ace2947698fb586c7348f660c986e642a05f7fbef46e9f5a8f6d663ef4

    • Size

      276KB

    • MD5

      2b9fd36ce5bc5df7ff7a597eae7acd01

    • SHA1

      f9dc9b46a8055dcc91821dad72460dca228a9989

    • SHA256

      d9e824ace2947698fb586c7348f660c986e642a05f7fbef46e9f5a8f6d663ef4

    • SHA512

      a705f59abedb1f0ee3a5935113d0735e97e38d3aa2f5f9f8187ebd7cdda0c4a597d1203f7ef980595f6ec72d490b3d24e55da17600b201f947bc5fd3fd5f0741

    • SSDEEP

      3072:xwcPM9Vv08oewxwcP78/k9T028qqcVz5fzsTl4dsOc6v2vTzwU+Pho86meq+FaSj:HPiZ08WHPEcT93PiY+Fa7BdvG

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks