Overview

overview

7

Static

static

5

1023b92bbb...57.exe

windows7-x64

7

1023b92bbb...57.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1023b92bbb4164374d46bf060542dc5ecaf328a107ad3e95a2480437d161ec57

  • Size

    2.6MB

  • Sample

    241006-m1bl9avbqg

  • MD5

    2645613a023e767350badacdeb59ff28

  • SHA1

    8c5cb46157fd7874b2b28392870d7d5d6bb10fc4

  • SHA256

    1023b92bbb4164374d46bf060542dc5ecaf328a107ad3e95a2480437d161ec57

  • SHA512

    4594451eb5b65897d6b399cbeea707e6a2809fa452aa6b0c83b5c6eba7e3a27530b4d9196a494d3be0f172772e85f7d63057f65ae34705d617735860b1975305

  • SSDEEP

    49152:yTGkQy5QZuTtS0rQMYOQ+q8CE0TG4QnTGHQc9KFeM:yKkVWsM0r1QnDK4uKHT0Fe

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      1023b92bbb4164374d46bf060542dc5ecaf328a107ad3e95a2480437d161ec57

    • Size

      2.6MB

    • MD5

      2645613a023e767350badacdeb59ff28

    • SHA1

      8c5cb46157fd7874b2b28392870d7d5d6bb10fc4

    • SHA256

      1023b92bbb4164374d46bf060542dc5ecaf328a107ad3e95a2480437d161ec57

    • SHA512

      4594451eb5b65897d6b399cbeea707e6a2809fa452aa6b0c83b5c6eba7e3a27530b4d9196a494d3be0f172772e85f7d63057f65ae34705d617735860b1975305

    • SSDEEP

      49152:yTGkQy5QZuTtS0rQMYOQ+q8CE0TG4QnTGHQc9KFeM:yKkVWsM0r1QnDK4uKHT0Fe

    Score
    7/10
    discoveryupx

    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks