Overview

overview

8

Static

static

7

688584ea83...88.exe

windows7-x64

8

688584ea83...88.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    688584ea833c38e59b9c57a4e5eefe094cede74acb6800d641cf52b4227eb988

  • Size

    84KB

  • Sample

    240722-2fj58asfjk

  • MD5

    bb3ecdd2b184be1e8640695432410863

  • SHA1

    39a5458d8366b1b577b83750df5fdc03d61e8891

  • SHA256

    688584ea833c38e59b9c57a4e5eefe094cede74acb6800d641cf52b4227eb988

  • SHA512

    2fe975c6cc6bd33f066250648c7d84037fe5b41aba5252f9505be1b7c91095f4fedf1bf53c030f4a8c1bd61708ea6aa10d8f452fd37de07b58e328a8bb980737

  • SSDEEP

    1536:MHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVt/2YRmA7hGRLlp9p5IMx0QtjA:MHoLde/OgV432UcP39hXJZn/UE4ltaqY

Score
8/10
persistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      688584ea833c38e59b9c57a4e5eefe094cede74acb6800d641cf52b4227eb988

    • Size

      84KB

    • MD5

      bb3ecdd2b184be1e8640695432410863

    • SHA1

      39a5458d8366b1b577b83750df5fdc03d61e8891

    • SHA256

      688584ea833c38e59b9c57a4e5eefe094cede74acb6800d641cf52b4227eb988

    • SHA512

      2fe975c6cc6bd33f066250648c7d84037fe5b41aba5252f9505be1b7c91095f4fedf1bf53c030f4a8c1bd61708ea6aa10d8f452fd37de07b58e328a8bb980737

    • SSDEEP

      1536:MHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVt/2YRmA7hGRLlp9p5IMx0QtjA:MHoLde/OgV432UcP39hXJZn/UE4ltaqY

    Score
    8/10
    persistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks