Overview

overview

7

Static

static

5

b4506ff88b...8N.dll

windows7-x64

5

b4506ff88b...8N.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b4506ff88bb8bc6cfb8eeb9da6991e009fbd99e393c132604cfb50d15b209438N.exe

  • Size

    118KB

  • Sample

    240925-xdcadavamf

  • MD5

    eae8fbfe3746e73089d4301f762e3970

  • SHA1

    5e5da4c2f64a1f57e524bcf9d81f58154ef9bbf6

  • SHA256

    b4506ff88bb8bc6cfb8eeb9da6991e009fbd99e393c132604cfb50d15b209438

  • SHA512

    6510efddf29afd8af9343b48c364499972944871be36300353d72d7e13f8c23c764d9ab0826c233868470e1e29e6ee107b280570f2dcec54dd5b6423aed5f1d1

  • SSDEEP

    1536:78DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:eIFYjnav4bnOAMaWeAt2outKG

Score
7/10
defense_evasiondiscoveryprivilege_escalationupx

Malware Config

Targets

    • Target

      b4506ff88bb8bc6cfb8eeb9da6991e009fbd99e393c132604cfb50d15b209438N.exe

    • Size

      118KB

    • MD5

      eae8fbfe3746e73089d4301f762e3970

    • SHA1

      5e5da4c2f64a1f57e524bcf9d81f58154ef9bbf6

    • SHA256

      b4506ff88bb8bc6cfb8eeb9da6991e009fbd99e393c132604cfb50d15b209438

    • SHA512

      6510efddf29afd8af9343b48c364499972944871be36300353d72d7e13f8c23c764d9ab0826c233868470e1e29e6ee107b280570f2dcec54dd5b6423aed5f1d1

    • SSDEEP

      1536:78DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:eIFYjnav4bnOAMaWeAt2outKG

    Score
    7/10
    defense_evasiondiscoveryprivilege_escalationupx

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks