Overview

overview

10

Static

static

10

SideLoadly.exe

windows11-21h2-x64

8

Resubmissions

27/09/2024, 01:07

240927-bgm1dsxcrl 10

26/09/2024, 22:39

240926-2k5mqavapf 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SideLoadly.exe

  • Size

    7.5MB

  • Sample

    240927-bgm1dsxcrl

  • MD5

    6e49bc51b5d77c6f5dec92484c0261df

  • SHA1

    795b5e7cbc30485f8c182de17c8d5cfad0a17e58

  • SHA256

    5346fe0ee4404066689fd5f8909fca7d6fa5a37bf510a27a064409583ce97ad6

  • SHA512

    b882cfff46278b422965844dbb920cc7008c6312299b38ac765fe9032976935e5a46d287329258762152bfb436f13f92caaba54cd5ca93b3f70b7d1d71ad0a50

  • SSDEEP

    196608:CigVVEXwfI9jUC2gYBYv3vbW2+iITx1U6nv:SVVE8IH2gYBgDWJTnzv

Score
10/10
blankgrabberdiscoveryexecutionupx

Malware Config

Targets

    • Target

      SideLoadly.exe

    • Size

      7.5MB

    • MD5

      6e49bc51b5d77c6f5dec92484c0261df

    • SHA1

      795b5e7cbc30485f8c182de17c8d5cfad0a17e58

    • SHA256

      5346fe0ee4404066689fd5f8909fca7d6fa5a37bf510a27a064409583ce97ad6

    • SHA512

      b882cfff46278b422965844dbb920cc7008c6312299b38ac765fe9032976935e5a46d287329258762152bfb436f13f92caaba54cd5ca93b3f70b7d1d71ad0a50

    • SSDEEP

      196608:CigVVEXwfI9jUC2gYBYv3vbW2+iITx1U6nv:SVVE8IH2gYBgDWJTnzv

    Score
    8/10
    discoveryexecutionupx

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks