Overview

overview

8

Static

static

7

afa9dd688b...6e.exe

windows7-x64

8

afa9dd688b...6e.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    afa9dd688b958bd13c42cca8bad013c5e14c1ce1136cb031d4e464057a90506e

  • Size

    34KB

  • Sample

    240919-bfgrzssfra

  • MD5

    a871569f23965886ada3170e754c9bb0

  • SHA1

    617ac3c3fe11516be01de4551b9e23274eb0fd30

  • SHA256

    afa9dd688b958bd13c42cca8bad013c5e14c1ce1136cb031d4e464057a90506e

  • SHA512

    a36feaa08ee6eb4f808ad39883e19db96a345b820982fb763bcf0a5c21371553ba3bb541a8381a4a16d6d271b02a9c9d6b1c1e976fcea771f4a7ca050759902f

  • SSDEEP

    768:LXBetSsydNreP5O36AIh0ktNGn262GbdBKfoz1LM1TcrtP5JtJ:rBet4ARO9I+ktcn2sdvzlM1TcrtP5TJ

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      afa9dd688b958bd13c42cca8bad013c5e14c1ce1136cb031d4e464057a90506e

    • Size

      34KB

    • MD5

      a871569f23965886ada3170e754c9bb0

    • SHA1

      617ac3c3fe11516be01de4551b9e23274eb0fd30

    • SHA256

      afa9dd688b958bd13c42cca8bad013c5e14c1ce1136cb031d4e464057a90506e

    • SHA512

      a36feaa08ee6eb4f808ad39883e19db96a345b820982fb763bcf0a5c21371553ba3bb541a8381a4a16d6d271b02a9c9d6b1c1e976fcea771f4a7ca050759902f

    • SSDEEP

      768:LXBetSsydNreP5O36AIh0ktNGn262GbdBKfoz1LM1TcrtP5JtJ:rBet4ARO9I+ktcn2sdvzlM1TcrtP5TJ

    Score
    8/10
    persistenceupxdiscovery

    • Adds policy Run key to start application

      persistence

    • Sets service image path in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks