5b18de51df1c1c97d458d2680375a74092baeafdaa77507bef17e04ca1d66c54 | Triage

Submit
Reports

Overview

overview

Static

static

7

5b18de51df...4N.exe

windows7-x64

5b18de51df...4N.exe

windows10-2004-x64

Sharing

General

Target

5b18de51df1c1c97d458d2680375a74092baeafdaa77507bef17e04ca1d66c54N
Size

176KB
Sample

240921-dwhekasglj
MD5

3514927694437ea9c695f589ef0fd5f0
SHA1

f535aba51759ea0cea904b9d76a1f3191ebd27eb
SHA256

5b18de51df1c1c97d458d2680375a74092baeafdaa77507bef17e04ca1d66c54
SHA512

16c19a41b2ef0a8509c72e571758120b7f2695dbb8b5f0b8c05538a52dd804ff7519bce7c64d79a22131f527fe4cba4c41c4032ffdb481d0d501a184f0d08a00
SSDEEP

3072:qu8ANCrkvPb3NyS7zPvPb35vPb34QpNBBz8fQ8bQ+gnUpEprf5sCzDPvPb3NyS7c:TvNNycZpNBB38b3Eprf59zlyclDpNBBW

Score

10^/10

discovery evasion persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

5b18de51df1c1c97d458d2680375a74092baeafdaa77507bef17e04ca1d66c54N.exe

Resource

win7-20240903-en

discovery evasion persistence upx

windows7-x64

14 signatures

120 seconds

Behavioral task

behavioral2

Sample

5b18de51df1c1c97d458d2680375a74092baeafdaa77507bef17e04ca1d66c54N.exe

Resource

win10v2004-20240802-en

discovery evasion upx

windows10-2004-x64

13 signatures

120 seconds

Malware Config

Targets

- Target
  
  5b18de51df1c1c97d458d2680375a74092baeafdaa77507bef17e04ca1d66c54N
- Size
  
  176KB
- MD5
  
  3514927694437ea9c695f589ef0fd5f0
- SHA1
  
  f535aba51759ea0cea904b9d76a1f3191ebd27eb
- SHA256
  
  5b18de51df1c1c97d458d2680375a74092baeafdaa77507bef17e04ca1d66c54
- SHA512
  
  16c19a41b2ef0a8509c72e571758120b7f2695dbb8b5f0b8c05538a52dd804ff7519bce7c64d79a22131f527fe4cba4c41c4032ffdb481d0d501a184f0d08a00
- SSDEEP
  
  3072:qu8ANCrkvPb3NyS7zPvPb35vPb34QpNBBz8fQ8bQ+gnUpEprf5sCzDPvPb3NyS7c:TvNNycZpNBB38b3Eprf59zlyclDpNBBW
Score

10^/10

discovery evasion persistence upx
- Modifies visibility of file extensions in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Power Settings
  powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Power Settings

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Network Share Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceupx

behavioral2

discoveryevasionupx

© 2018-2025

Terms | Privacy