Overview

overview

10

Static

static

7

6d32504b8f...0N.exe

windows7-x64

10

6d32504b8f...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6d32504b8f5fbdfa87ba3ef0b1abfc30N.exe

  • Size

    215KB

  • Sample

    240803-jjh38awhqr

  • MD5

    6d32504b8f5fbdfa87ba3ef0b1abfc30

  • SHA1

    053f810f3045bd366b699ebce920a783365a241f

  • SHA256

    694a481b83b7995e8fb59801430788247ba46192b2cc8c3d9edfca2e334110b5

  • SHA512

    f373139bb17b9fc8bfc32cb6061579087802fc9ffa5812d31b4b9c3e0b5006a4dd41b57945366e9d17eb00f4367f0ec3bd1544f0097ab91dcc77308f90df27e3

  • SSDEEP

    3072:xwcPu9Vv08oewxwcP78/k9PjQK6o5R5StHeHv5cyOZyW6RRWy4ZNC6ZraL3mU:HP4Z08WHPB5tbXWBZw6ZraL3m

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      6d32504b8f5fbdfa87ba3ef0b1abfc30N.exe

    • Size

      215KB

    • MD5

      6d32504b8f5fbdfa87ba3ef0b1abfc30

    • SHA1

      053f810f3045bd366b699ebce920a783365a241f

    • SHA256

      694a481b83b7995e8fb59801430788247ba46192b2cc8c3d9edfca2e334110b5

    • SHA512

      f373139bb17b9fc8bfc32cb6061579087802fc9ffa5812d31b4b9c3e0b5006a4dd41b57945366e9d17eb00f4367f0ec3bd1544f0097ab91dcc77308f90df27e3

    • SSDEEP

      3072:xwcPu9Vv08oewxwcP78/k9PjQK6o5R5StHeHv5cyOZyW6RRWy4ZNC6ZraL3mU:HP4Z08WHPB5tbXWBZw6ZraL3m

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks