Overview

overview

7

Static

static

7

6ad1e0a5fb...fb.exe

windows7-x64

7

6ad1e0a5fb...fb.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6ad1e0a5fb5ec22dec48587020d8c39dd07562e2838d2ad9c94c0a8f57eda9fb

  • Size

    436KB

  • Sample

    240813-z7qqzawhpc

  • MD5

    c6bf484ad22f7d4b046dd9beaec30ecf

  • SHA1

    3c625ede8a9d7311e2cce84181f95f70b6be4952

  • SHA256

    6ad1e0a5fb5ec22dec48587020d8c39dd07562e2838d2ad9c94c0a8f57eda9fb

  • SHA512

    bf5f7b8750c582a95e420a9fa09da99cbec3e844943c9bc84e1bc7b325861a5b9cca2c8e07d5579920272f70b1de49b3de8b9f36470753e2b13a964f58c4b16b

  • SSDEEP

    3072:Kae7OubpGGErCbuZM4EQrjo7vgHJJPPIgR4ZvyezcduPgzKy8s/:KacxGfTMfQrjoziJJHIjKezcdwgn/

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      6ad1e0a5fb5ec22dec48587020d8c39dd07562e2838d2ad9c94c0a8f57eda9fb

    • Size

      436KB

    • MD5

      c6bf484ad22f7d4b046dd9beaec30ecf

    • SHA1

      3c625ede8a9d7311e2cce84181f95f70b6be4952

    • SHA256

      6ad1e0a5fb5ec22dec48587020d8c39dd07562e2838d2ad9c94c0a8f57eda9fb

    • SHA512

      bf5f7b8750c582a95e420a9fa09da99cbec3e844943c9bc84e1bc7b325861a5b9cca2c8e07d5579920272f70b1de49b3de8b9f36470753e2b13a964f58c4b16b

    • SSDEEP

      3072:Kae7OubpGGErCbuZM4EQrjo7vgHJJPPIgR4ZvyezcduPgzKy8s/:KacxGfTMfQrjoziJJHIjKezcdwgn/

    Score
    7/10
    discoverypersistenceupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks