Overview

overview

10

Static

static

7

d450204db0...6b.exe

windows7-x64

10

d450204db0...6b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d450204db0f2a3a17cbf2a10123b8fe95a4f97de58aa8b23207e558e309fe56b

  • Size

    176KB

  • Sample

    240909-dprpnayejm

  • MD5

    be3db34d57dc4b55a7c43122aafd365c

  • SHA1

    bb1050d0c6a9baef5b5d199b58149e52c0b4b654

  • SHA256

    d450204db0f2a3a17cbf2a10123b8fe95a4f97de58aa8b23207e558e309fe56b

  • SHA512

    28a1997c427c0525ef920e3869f7c22672bb85061269516151c2348c66f989bac14e65eb3edadf396acf93a2aedde3778aa4eeb98eac06f1eef9bca290a1fb81

  • SSDEEP

    3072:qu8ANCrkvPb3NyS7zPvPb35vPb34QpNBBz8fQ8bQ+gnUpEprf5sCzDPvPb3NyS7Q:TvNNycZpNBB38b3Eprf59zlyclDpNBBK

Score
10/10
discoveryevasionupx

Malware Config

Targets

    • Target

      d450204db0f2a3a17cbf2a10123b8fe95a4f97de58aa8b23207e558e309fe56b

    • Size

      176KB

    • MD5

      be3db34d57dc4b55a7c43122aafd365c

    • SHA1

      bb1050d0c6a9baef5b5d199b58149e52c0b4b654

    • SHA256

      d450204db0f2a3a17cbf2a10123b8fe95a4f97de58aa8b23207e558e309fe56b

    • SHA512

      28a1997c427c0525ef920e3869f7c22672bb85061269516151c2348c66f989bac14e65eb3edadf396acf93a2aedde3778aa4eeb98eac06f1eef9bca290a1fb81

    • SSDEEP

      3072:qu8ANCrkvPb3NyS7zPvPb35vPb34QpNBBz8fQ8bQ+gnUpEprf5sCzDPvPb3NyS7Q:TvNNycZpNBB38b3Eprf59zlyclDpNBBK

    Score
    10/10
    discoveryevasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks