Overview

overview

8

Static

static

7

2e5d91ad1c...0N.exe

windows7-x64

8

2e5d91ad1c...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e5d91ad1c6ff5227c3bccdcf67f8040N.exe

  • Size

    448KB

  • Sample

    240726-tw47bsyhjq

  • MD5

    2e5d91ad1c6ff5227c3bccdcf67f8040

  • SHA1

    abb4a49a90dfa9202fbde3b6d8d79dca376ab2af

  • SHA256

    9090d1d1466213aa0138bc17587f960bbe58ca4cf84ad9e0d32462651992f49a

  • SHA512

    e91bf7daeab71cbfb45bc7ee3441c2871ca15d5621ef7404234b0efddc9b2c8ec2f98063961cb5f752b0bfb5ee39c13eab444f6042702dec6f680f5885d1e468

  • SSDEEP

    6144:i4/LuS+WcPmKmsEsY9RqSs3JqyiZdMFK4:PL25msWs3AA

Score
8/10
discoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      2e5d91ad1c6ff5227c3bccdcf67f8040N.exe

    • Size

      448KB

    • MD5

      2e5d91ad1c6ff5227c3bccdcf67f8040

    • SHA1

      abb4a49a90dfa9202fbde3b6d8d79dca376ab2af

    • SHA256

      9090d1d1466213aa0138bc17587f960bbe58ca4cf84ad9e0d32462651992f49a

    • SHA512

      e91bf7daeab71cbfb45bc7ee3441c2871ca15d5621ef7404234b0efddc9b2c8ec2f98063961cb5f752b0bfb5ee39c13eab444f6042702dec6f680f5885d1e468

    • SSDEEP

      6144:i4/LuS+WcPmKmsEsY9RqSs3JqyiZdMFK4:PL25msWs3AA

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks