Overview

overview

7

Static

static

7

2dedc6c3c6...3N.exe

windows7-x64

7

2dedc6c3c6...3N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2dedc6c3c6677be5f937a5ea8e8ab328f1e39f0c9ec5db0329718472a32132e3N

  • Size

    237KB

  • Sample

    240919-g1bpcsvdpq

  • MD5

    f12f4efa10ffa56f032a5dca01c354d0

  • SHA1

    f1de33699675f75f44f4a9883671b6714a72320f

  • SHA256

    2dedc6c3c6677be5f937a5ea8e8ab328f1e39f0c9ec5db0329718472a32132e3

  • SHA512

    93c2e0b6deeac2a6a197e1b6f576153ae79d40142cd1382db25be8b9a1d2299cc1069f41fdc75e1d0c48aeb7f82b6445e0fa391479bad2cec2be92eabb1a5b83

  • SSDEEP

    3072:l1Upt1DlS2KyYzDhLrLeBdVw9+TpFLMHb+lXpQK5:CYzdLQa8z0yQQ

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2dedc6c3c6677be5f937a5ea8e8ab328f1e39f0c9ec5db0329718472a32132e3N

    • Size

      237KB

    • MD5

      f12f4efa10ffa56f032a5dca01c354d0

    • SHA1

      f1de33699675f75f44f4a9883671b6714a72320f

    • SHA256

      2dedc6c3c6677be5f937a5ea8e8ab328f1e39f0c9ec5db0329718472a32132e3

    • SHA512

      93c2e0b6deeac2a6a197e1b6f576153ae79d40142cd1382db25be8b9a1d2299cc1069f41fdc75e1d0c48aeb7f82b6445e0fa391479bad2cec2be92eabb1a5b83

    • SSDEEP

      3072:l1Upt1DlS2KyYzDhLrLeBdVw9+TpFLMHb+lXpQK5:CYzdLQa8z0yQQ

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks