Overview

overview

7

Static

static

7

9b26189e21...0N.exe

windows7-x64

7

9b26189e21...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    9b26189e214a020993398ea1e8f42890N.exe

  • Size

    6.0MB

  • Sample

    240805-rcw1hasbnc

  • MD5

    9b26189e214a020993398ea1e8f42890

  • SHA1

    956f89379427cfbf09e980fc1ce6d4bc61381ec1

  • SHA256

    45b634bfb1d94e3d271824893632dcc63e69738b6466ebc51acb3205133ddfe0

  • SHA512

    a3bfbe90881bd468efa587ea6fc1cf71968efd701bafe0e0270b62b9ade9fdef315a23606a4b2763f1e1a449e8f2b6130f5e7141d7c82d823c6eaeab675bc39b

  • SSDEEP

    98304:I8MTjzIq5aVZPcakLv02IrBLcakFDdeHo1jXZlAJsN0tlsecakLv02IrBLcakhDh:I8MTjzIhjdrZJdecA9lAJJtlbdrZJdgh

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      9b26189e214a020993398ea1e8f42890N.exe

    • Size

      6.0MB

    • MD5

      9b26189e214a020993398ea1e8f42890

    • SHA1

      956f89379427cfbf09e980fc1ce6d4bc61381ec1

    • SHA256

      45b634bfb1d94e3d271824893632dcc63e69738b6466ebc51acb3205133ddfe0

    • SHA512

      a3bfbe90881bd468efa587ea6fc1cf71968efd701bafe0e0270b62b9ade9fdef315a23606a4b2763f1e1a449e8f2b6130f5e7141d7c82d823c6eaeab675bc39b

    • SSDEEP

      98304:I8MTjzIq5aVZPcakLv02IrBLcakFDdeHo1jXZlAJsN0tlsecakLv02IrBLcakhDh:I8MTjzIhjdrZJdecA9lAJJtlbdrZJdgh

    Score
    7/10
    discoveryupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks