Overview

overview

8

Static

static

1

c14071f5c5...98.dll

windows7-x64

8

c14071f5c5...98.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c14071f5c5edb9393b376dfa92b168aaa4b0416e900fc2c14b62f2bc3e6bfe98

  • Size

    223KB

  • Sample

    240608-3xkczsad5s

  • MD5

    a8a7492b028f6bb168090ca43363b628

  • SHA1

    e41e54519554562e7e9afb3173206e9858e404a5

  • SHA256

    c14071f5c5edb9393b376dfa92b168aaa4b0416e900fc2c14b62f2bc3e6bfe98

  • SHA512

    c817a0aa6972dea3c8ce513de96417c38dd61ad8b45372fcf869ef8cd53c84aa9244d44c9f289954f9fd24644b2ca9165e6f352296b69ad146d2aa07bb5d490d

  • SSDEEP

    3072:6huf5AbAcviJvK2agufAnAZdlGZxIOtY81fs2lQBV+UdE+rECWp7hKAvFuU:ZBAbyVagufYLIBV+UdvrEFp7hKAvr

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      c14071f5c5edb9393b376dfa92b168aaa4b0416e900fc2c14b62f2bc3e6bfe98

    • Size

      223KB

    • MD5

      a8a7492b028f6bb168090ca43363b628

    • SHA1

      e41e54519554562e7e9afb3173206e9858e404a5

    • SHA256

      c14071f5c5edb9393b376dfa92b168aaa4b0416e900fc2c14b62f2bc3e6bfe98

    • SHA512

      c817a0aa6972dea3c8ce513de96417c38dd61ad8b45372fcf869ef8cd53c84aa9244d44c9f289954f9fd24644b2ca9165e6f352296b69ad146d2aa07bb5d490d

    • SSDEEP

      3072:6huf5AbAcviJvK2agufAnAZdlGZxIOtY81fs2lQBV+UdE+rECWp7hKAvFuU:ZBAbyVagufYLIBV+UdvrEFp7hKAvr

    Score
    8/10
    persistenceupx

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks