Overview

overview

8

Static

static

5

664a737c44...4N.exe

windows7-x64

8

664a737c44...4N.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    664a737c4401f5c45fe541088551335214e71bdd5fbbd887b1c6ccdde443fc34N

  • Size

    938KB

  • Sample

    241010-afmgssxdrq

  • MD5

    451a16a85434ed59c9000c5e8e8b1c50

  • SHA1

    b85cb2a47bea248cea8b6969c7f4a06ad4405352

  • SHA256

    664a737c4401f5c45fe541088551335214e71bdd5fbbd887b1c6ccdde443fc34

  • SHA512

    e24b8adde9c33fab57fede1cccee3c9022f5e9a9e637f8cb990eb95e1fcc29c631d021939afc6513550fa47c88d3f44713f98f5bbc91acba6837357a0eafc793

  • SSDEEP

    24576:v6Zv2ivhBVnFys7xP86LkRCwPYfuukvDtiflQRg:vE2ivhQs7dLkRumsH

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      664a737c4401f5c45fe541088551335214e71bdd5fbbd887b1c6ccdde443fc34N

    • Size

      938KB

    • MD5

      451a16a85434ed59c9000c5e8e8b1c50

    • SHA1

      b85cb2a47bea248cea8b6969c7f4a06ad4405352

    • SHA256

      664a737c4401f5c45fe541088551335214e71bdd5fbbd887b1c6ccdde443fc34

    • SHA512

      e24b8adde9c33fab57fede1cccee3c9022f5e9a9e637f8cb990eb95e1fcc29c631d021939afc6513550fa47c88d3f44713f98f5bbc91acba6837357a0eafc793

    • SSDEEP

      24576:v6Zv2ivhBVnFys7xP86LkRCwPYfuukvDtiflQRg:vE2ivhQs7dLkRumsH

    Score
    8/10
    discoverypersistenceupx

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks