Overview

overview

10

Static

static

3

5a54e57a80...33.exe

windows7-x64

10

5a54e57a80...33.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a54e57a8054961caaee3e8ad6d5aeb7703e9e68147a5cfbd05d71dbe9481433

  • Size

    22KB

  • Sample

    240613-27vq2aycjk

  • MD5

    0e4f2f9c303c1988cb4a575896c2f9ca

  • SHA1

    d45890164bd1b440828d369ae110d0c0545c6378

  • SHA256

    5a54e57a8054961caaee3e8ad6d5aeb7703e9e68147a5cfbd05d71dbe9481433

  • SHA512

    30170e76617fa7236c4f5219f14a3d75c37cba51124f07c73248edbe7f46893111d9e14716385f35b82e72e26b75098809f5d5a35793aa59c942f9ea1978af76

  • SSDEEP

    384:jIz4Wd82EMVCGW8oSukbLpe2KKMOHbQVJv79tlDvz+ioL9+3w/0nIqeObSUrH:jIUWqeC/juNK4QPv71sL83w/0nIqeOj7

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      5a54e57a8054961caaee3e8ad6d5aeb7703e9e68147a5cfbd05d71dbe9481433

    • Size

      22KB

    • MD5

      0e4f2f9c303c1988cb4a575896c2f9ca

    • SHA1

      d45890164bd1b440828d369ae110d0c0545c6378

    • SHA256

      5a54e57a8054961caaee3e8ad6d5aeb7703e9e68147a5cfbd05d71dbe9481433

    • SHA512

      30170e76617fa7236c4f5219f14a3d75c37cba51124f07c73248edbe7f46893111d9e14716385f35b82e72e26b75098809f5d5a35793aa59c942f9ea1978af76

    • SSDEEP

      384:jIz4Wd82EMVCGW8oSukbLpe2KKMOHbQVJv79tlDvz+ioL9+3w/0nIqeObSUrH:jIUWqeC/juNK4QPv71sL83w/0nIqeOj7

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks