Overview

overview

10

Static

static

1

dfcb72df9d...0N.exe

windows7-x64

10

dfcb72df9d...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfcb72df9d7365a74214073b7006d9a0N.exe

  • Size

    209KB

  • Sample

    240821-sxknmszcrl

  • MD5

    dfcb72df9d7365a74214073b7006d9a0

  • SHA1

    6d1b58acc1fdf1961c6ec807c669e67684d93b4f

  • SHA256

    74550647b3a5e08fb3ffaeb4444beeea3e86312919a7e7350008062aeeac37e3

  • SHA512

    35b143b4bd084634c40f517b92f0843a725553064be5cf167d52f5ad099407d56540885811b163bf861908df587973179f6d05933141efd612b5704ed43607f7

  • SSDEEP

    3072:0Qcjk9tVRNIcjb4Ryfjijjx14hdeCXHKPJFo9zpE7Di0X0JuLL+o7BlpF9e:0Qh9tVRm2kh34hdeCkcG7DEALLlnN

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      dfcb72df9d7365a74214073b7006d9a0N.exe

    • Size

      209KB

    • MD5

      dfcb72df9d7365a74214073b7006d9a0

    • SHA1

      6d1b58acc1fdf1961c6ec807c669e67684d93b4f

    • SHA256

      74550647b3a5e08fb3ffaeb4444beeea3e86312919a7e7350008062aeeac37e3

    • SHA512

      35b143b4bd084634c40f517b92f0843a725553064be5cf167d52f5ad099407d56540885811b163bf861908df587973179f6d05933141efd612b5704ed43607f7

    • SSDEEP

      3072:0Qcjk9tVRNIcjb4Ryfjijjx14hdeCXHKPJFo9zpE7Di0X0JuLL+o7BlpF9e:0Qh9tVRm2kh34hdeCkcG7DEALLlnN

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks