Overview

overview

8

Static

static

7

9ba68f9d65...0N.exe

windows7-x64

8

9ba68f9d65...0N.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ba68f9d654a1de51fb0c03eaca58140N.exe

  • Size

    149KB

  • Sample

    240721-kr5gvsxbka

  • MD5

    9ba68f9d654a1de51fb0c03eaca58140

  • SHA1

    e8456e8d2233f8925bd9983885d94175bacc707d

  • SHA256

    5fa565e566196ec50de17af80590b7c945f6d1ab2a1b75e0ad26464c4c70f2ff

  • SHA512

    0a1c57cf7d29012df5d286c1125e4453aa2a0009b9c379e884c6a3e4326d1403fa7a5926a65deda9035d8124735fde6c14931497947cca199230f365be060276

  • SSDEEP

    3072:2pBvXEzYmorfUc4Gua+I9QsybXtc9acBR6Hcb1pRR7bbxgfKaNAmXjTi1StNm64Z:OWz2Hz9QH69acBBb1TVbbxgfdvXjTY3Z

Score
8/10
persistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      9ba68f9d654a1de51fb0c03eaca58140N.exe

    • Size

      149KB

    • MD5

      9ba68f9d654a1de51fb0c03eaca58140

    • SHA1

      e8456e8d2233f8925bd9983885d94175bacc707d

    • SHA256

      5fa565e566196ec50de17af80590b7c945f6d1ab2a1b75e0ad26464c4c70f2ff

    • SHA512

      0a1c57cf7d29012df5d286c1125e4453aa2a0009b9c379e884c6a3e4326d1403fa7a5926a65deda9035d8124735fde6c14931497947cca199230f365be060276

    • SSDEEP

      3072:2pBvXEzYmorfUc4Gua+I9QsybXtc9acBR6Hcb1pRR7bbxgfKaNAmXjTi1StNm64Z:OWz2Hz9QH69acBBb1TVbbxgfdvXjTY3Z

    Score
    8/10
    persistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks