Overview

overview

8

Static

static

7

7b9d16e07d...0N.exe

windows7-x64

8

7b9d16e07d...0N.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b9d16e07d6d96e64e674b0a46c94580N.exe

  • Size

    656KB

  • Sample

    240727-b3ek5syelk

  • MD5

    7b9d16e07d6d96e64e674b0a46c94580

  • SHA1

    f0421b0c13dd924b6743944e400acd3c0044f7d5

  • SHA256

    3fc99ab4ae6cd0e09ae7b63eaf34221d4464ff9eccbaa42f0eda00a3031d4bc0

  • SHA512

    0a188f13c631aa9783f33e7061d89af3fd59c85618611c4a0e321861bf6e6dcf17fb9963fd1d0b1575eb880ccebe7668818ca5eefd295b8325084c4c9f5c25bb

  • SSDEEP

    12288:7tKe6Zv23YLVFhBsC8iFHSs7xPY1f6HriPwU8mNCZQUEdsaj1k2CC9md:v6Zv2ivhBVnFys7xP86LkRCQsau2Y

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      7b9d16e07d6d96e64e674b0a46c94580N.exe

    • Size

      656KB

    • MD5

      7b9d16e07d6d96e64e674b0a46c94580

    • SHA1

      f0421b0c13dd924b6743944e400acd3c0044f7d5

    • SHA256

      3fc99ab4ae6cd0e09ae7b63eaf34221d4464ff9eccbaa42f0eda00a3031d4bc0

    • SHA512

      0a188f13c631aa9783f33e7061d89af3fd59c85618611c4a0e321861bf6e6dcf17fb9963fd1d0b1575eb880ccebe7668818ca5eefd295b8325084c4c9f5c25bb

    • SSDEEP

      12288:7tKe6Zv23YLVFhBsC8iFHSs7xPY1f6HriPwU8mNCZQUEdsaj1k2CC9md:v6Zv2ivhBVnFys7xP86LkRCQsau2Y

    Score
    8/10
    discoverypersistenceupx

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks