Overview

overview

10

Static

static

7

bd23bddf90...dd.exe

windows7-x64

10

bd23bddf90...dd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd23bddf90bb484dbb6e5b4c589d0c00ef21adb287ed70ece4f7b051bcc735dd

  • Size

    286KB

  • Sample

    240812-b5g42stepd

  • MD5

    b0e4de2bb623973feef545979801a2e7

  • SHA1

    ecdfef61ef6a803aa2dfc9ecdf14e8ded1216709

  • SHA256

    bd23bddf90bb484dbb6e5b4c589d0c00ef21adb287ed70ece4f7b051bcc735dd

  • SHA512

    fff0c435efa5b6188684f1284c71405805447733731f64c06a13f9bd0fdd559e0e82cd96a8aaa3a3b20f40bf27604b1dd5825083b96fc8e28634d1486d22f43e

  • SSDEEP

    1536:mseT7BVwxfvEFwjRFBrCnBrCABrCuolrCcBrCuKBrCcBrCuKBrC6eT7BVwxfvEFb:msmVwRKCWs7oXCXC6mVwRKQmVwRKYJe

Score
10/10
discoveryevasionupx

Malware Config

Targets

    • Target

      bd23bddf90bb484dbb6e5b4c589d0c00ef21adb287ed70ece4f7b051bcc735dd

    • Size

      286KB

    • MD5

      b0e4de2bb623973feef545979801a2e7

    • SHA1

      ecdfef61ef6a803aa2dfc9ecdf14e8ded1216709

    • SHA256

      bd23bddf90bb484dbb6e5b4c589d0c00ef21adb287ed70ece4f7b051bcc735dd

    • SHA512

      fff0c435efa5b6188684f1284c71405805447733731f64c06a13f9bd0fdd559e0e82cd96a8aaa3a3b20f40bf27604b1dd5825083b96fc8e28634d1486d22f43e

    • SSDEEP

      1536:mseT7BVwxfvEFwjRFBrCnBrCABrCuolrCcBrCuKBrCcBrCuKBrC6eT7BVwxfvEFb:msmVwRKCWs7oXCXC6mVwRKQmVwRKYJe

    Score
    10/10
    discoveryevasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks