Overview

overview

8

Static

static

5

4b04f5b4b1...eN.exe

windows7-x64

8

4b04f5b4b1...eN.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b04f5b4b13d7b47193e0d2ce1373d78ead5a0798937af062463beb7441fc27eN

  • Size

    1.1MB

  • Sample

    241010-mn9crazbln

  • MD5

    248612f5a68ca920f0e0acacb60cac60

  • SHA1

    992d22545542ed422e48b6abf48f4622f19d43ec

  • SHA256

    4b04f5b4b13d7b47193e0d2ce1373d78ead5a0798937af062463beb7441fc27e

  • SHA512

    504e785f291a603dd753cbbee6e008889b86ab7ca26d1e96bbbe52c642109a4051191fee7b0aca5d69210064cc6fe17316b3c911506ec5f3347cfc24b62ffa5c

  • SSDEEP

    24576:v6Zv2ivhBVnFys7xP86Lh7uhmh8VZ7i/+XAmvYSFdbRPIbgRrVCWpYzQ:vE2ivhQs7dLNuhmuVZ7iHmv5FJRIqXCE

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      4b04f5b4b13d7b47193e0d2ce1373d78ead5a0798937af062463beb7441fc27eN

    • Size

      1.1MB

    • MD5

      248612f5a68ca920f0e0acacb60cac60

    • SHA1

      992d22545542ed422e48b6abf48f4622f19d43ec

    • SHA256

      4b04f5b4b13d7b47193e0d2ce1373d78ead5a0798937af062463beb7441fc27e

    • SHA512

      504e785f291a603dd753cbbee6e008889b86ab7ca26d1e96bbbe52c642109a4051191fee7b0aca5d69210064cc6fe17316b3c911506ec5f3347cfc24b62ffa5c

    • SSDEEP

      24576:v6Zv2ivhBVnFys7xP86Lh7uhmh8VZ7i/+XAmvYSFdbRPIbgRrVCWpYzQ:vE2ivhQs7dLNuhmuVZ7iHmv5FJRIqXCE

    Score
    8/10
    discoverypersistenceupx

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks