Overview

overview

8

Static

static

3

17a62152a3...7a.exe

windows7-x64

8

17a62152a3...7a.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    17a62152a36aeed323b8f8438574117a.bin

  • Size

    688KB

  • Sample

    240629-ce7sfsycph

  • MD5

    17a62152a36aeed323b8f8438574117a

  • SHA1

    3b4052ff5951f547cafded1147aaaa095511b142

  • SHA256

    4ffdbf32065a488e00cc829eb88847064496999f7f06fe9ab9faad763b8505fb

  • SHA512

    3ae8137b6b33cb9df2874aa93b5fc76ef944c526568e0a8f9c868dcf429d448e4e4f58d7d422d00da41a5ffc0390cb3c6b92a22af0d5ab067acab82ece693e46

  • SSDEEP

    12288:I1FIAhwASC2AFCYG9+LbRQ+RhKr5rZjJB+u0ZzBZTRFXO0asV/ATXli:Qr2ASCt7vJQ+RhKNlJkxTZT7+tsV/Ar4

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      17a62152a36aeed323b8f8438574117a.bin

    • Size

      688KB

    • MD5

      17a62152a36aeed323b8f8438574117a

    • SHA1

      3b4052ff5951f547cafded1147aaaa095511b142

    • SHA256

      4ffdbf32065a488e00cc829eb88847064496999f7f06fe9ab9faad763b8505fb

    • SHA512

      3ae8137b6b33cb9df2874aa93b5fc76ef944c526568e0a8f9c868dcf429d448e4e4f58d7d422d00da41a5ffc0390cb3c6b92a22af0d5ab067acab82ece693e46

    • SSDEEP

      12288:I1FIAhwASC2AFCYG9+LbRQ+RhKr5rZjJB+u0ZzBZTRFXO0asV/ATXli:Qr2ASCt7vJQ+RhKNlJkxTZT7+tsV/Ar4

    Score
    8/10
    persistenceupx

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks