Overview

overview

8

Static

static

7

2143ce8c11...dN.exe

windows7-x64

8

2143ce8c11...dN.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2143ce8c11bd2435658660bf2201e03f6e6c2dbe8dd501943900a79c166a304dN

  • Size

    728KB

  • Sample

    240919-d1akhsyfkl

  • MD5

    eb66af4da0dc4e8aebb7cca89cf95cb0

  • SHA1

    ae37d7a2b8c973a5beef29db80ff07312d2a451b

  • SHA256

    2143ce8c11bd2435658660bf2201e03f6e6c2dbe8dd501943900a79c166a304d

  • SHA512

    6910b805f1108b11dc4363554ee140cb630e07136282294137c5f7c827895b42a0e26fcda50eced5431b81f9e8fddedab9577b6a009ce6642d2e45d1721a1f77

  • SSDEEP

    12288:7tKe6Zv23YLVFhBsC8iFHs+hsuQXIQRUP/g8t5XiSIE9u7p9mo:v6Zv2ivhBVnFvh5Q44UP48rIEMmo

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      2143ce8c11bd2435658660bf2201e03f6e6c2dbe8dd501943900a79c166a304dN

    • Size

      728KB

    • MD5

      eb66af4da0dc4e8aebb7cca89cf95cb0

    • SHA1

      ae37d7a2b8c973a5beef29db80ff07312d2a451b

    • SHA256

      2143ce8c11bd2435658660bf2201e03f6e6c2dbe8dd501943900a79c166a304d

    • SHA512

      6910b805f1108b11dc4363554ee140cb630e07136282294137c5f7c827895b42a0e26fcda50eced5431b81f9e8fddedab9577b6a009ce6642d2e45d1721a1f77

    • SSDEEP

      12288:7tKe6Zv23YLVFhBsC8iFHs+hsuQXIQRUP/g8t5XiSIE9u7p9mo:v6Zv2ivhBVnFvh5Q44UP48rIEMmo

    Score
    8/10
    discoverypersistenceupx

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks