Overview

overview

8

Static

static

5

9f9699c508...0N.exe

windows7-x64

8

9f9699c508...0N.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f9699c5083b402eae59e13b9bb872db8b951c152950726db87fca6ed334d610N.exe

  • Size

    578KB

  • Sample

    240925-w6v3hszhqk

  • MD5

    b52088e450ef03ff18b089f2638e54a0

  • SHA1

    98c65f8876cd9c0065cf8ca2d0305d16d265e4ea

  • SHA256

    9f9699c5083b402eae59e13b9bb872db8b951c152950726db87fca6ed334d610

  • SHA512

    43312e853b0c6c721ec0bb7aa5ec4a6c3dbf1506a4e413209e4828bf30e23f3ba618dd27d94bcff52cc2aa33f933004e5b4ce6bd174961f6c95cfa5225aff53f

  • SSDEEP

    6144:XV55pRPQdrFhbEhtVacLaN//2gWF6lxcBbmKm:XDDGdDbEh/a3tKj

Score
8/10
discoveryevasionupx

Malware Config

Targets

    • Target

      9f9699c5083b402eae59e13b9bb872db8b951c152950726db87fca6ed334d610N.exe

    • Size

      578KB

    • MD5

      b52088e450ef03ff18b089f2638e54a0

    • SHA1

      98c65f8876cd9c0065cf8ca2d0305d16d265e4ea

    • SHA256

      9f9699c5083b402eae59e13b9bb872db8b951c152950726db87fca6ed334d610

    • SHA512

      43312e853b0c6c721ec0bb7aa5ec4a6c3dbf1506a4e413209e4828bf30e23f3ba618dd27d94bcff52cc2aa33f933004e5b4ce6bd174961f6c95cfa5225aff53f

    • SSDEEP

      6144:XV55pRPQdrFhbEhtVacLaN//2gWF6lxcBbmKm:XDDGdDbEh/a3tKj

    Score
    8/10
    discoveryevasionupx

    • Looks for VMWare Tools registry key

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks