Overview

overview

7

Static

static

5

b9cbf862a9...9N.exe

windows7-x64

7

b9cbf862a9...9N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b9cbf862a949aab950547345e5d5cb54d0cb73aa628c1054d26d6d67c9d64c59N

  • Size

    501KB

  • Sample

    241002-l5cvfavakb

  • MD5

    bf2f34d8dd65baafe06adbf48e212170

  • SHA1

    fa7098e59f284470827246800ce6a6cec209f391

  • SHA256

    b9cbf862a949aab950547345e5d5cb54d0cb73aa628c1054d26d6d67c9d64c59

  • SHA512

    75c003b5553b469cc83208d6354fdba399e9654c5d9a73c9712c3ee5941ba998eeaf1d5258102d1ee653ce27c19a1d6baa00b3f8f8221020e7799f4fb4e648cc

  • SSDEEP

    12288:Qcv/GFNm+lp4xM+aPOKNiXhpRPBTPpLG90EcVM:Qcv/6pqqOKNiXhpTTPhtE

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      b9cbf862a949aab950547345e5d5cb54d0cb73aa628c1054d26d6d67c9d64c59N

    • Size

      501KB

    • MD5

      bf2f34d8dd65baafe06adbf48e212170

    • SHA1

      fa7098e59f284470827246800ce6a6cec209f391

    • SHA256

      b9cbf862a949aab950547345e5d5cb54d0cb73aa628c1054d26d6d67c9d64c59

    • SHA512

      75c003b5553b469cc83208d6354fdba399e9654c5d9a73c9712c3ee5941ba998eeaf1d5258102d1ee653ce27c19a1d6baa00b3f8f8221020e7799f4fb4e648cc

    • SSDEEP

      12288:Qcv/GFNm+lp4xM+aPOKNiXhpRPBTPpLG90EcVM:Qcv/6pqqOKNiXhpTTPhtE

    Score
    7/10
    discoveryupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks