Overview

overview

10

Static

static

10

518548d37f...0N.exe

windows7-x64

7

518548d37f...0N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    518548d37f49897194571d1e56511000N

  • Size

    1.4MB

  • Sample

    240909-1cg11s1dpj

  • MD5

    518548d37f49897194571d1e56511000

  • SHA1

    6fe78cac017c2916b1b1f3dcfc7c8d72fc600c7b

  • SHA256

    62311ea1206451ac35e34583806552f51c1bf749cddce7dd34d690a661575501

  • SHA512

    707f610d18ad2980965bcee0ab2632e428f131c2b23cba1e1031e45a20587a53c2ccd82e51876641a1286cfc2a162d7494e7045c9399a11d5613b7a79978fcaa

  • SSDEEP

    24576:ATU7AAmZZcVKfIxTiEVc847flVC6faaQDbGV6eH81ko:ATU7AAmw4gxeOw46fUbNecd

Score
10/10
warzoneratdiscoverypersistenceratupx

Malware Config

Targets

    • Target

      518548d37f49897194571d1e56511000N

    • Size

      1.4MB

    • MD5

      518548d37f49897194571d1e56511000

    • SHA1

      6fe78cac017c2916b1b1f3dcfc7c8d72fc600c7b

    • SHA256

      62311ea1206451ac35e34583806552f51c1bf749cddce7dd34d690a661575501

    • SHA512

      707f610d18ad2980965bcee0ab2632e428f131c2b23cba1e1031e45a20587a53c2ccd82e51876641a1286cfc2a162d7494e7045c9399a11d5613b7a79978fcaa

    • SSDEEP

      24576:ATU7AAmZZcVKfIxTiEVc847flVC6faaQDbGV6eH81ko:ATU7AAmw4gxeOw46fUbNecd

    Score
    7/10
    discoverypersistenceupx

    • Drops startup file

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks