Overview

overview

7

Static

static

3

9b005b4b83...5N.exe

windows7-x64

7

9b005b4b83...5N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    9b005b4b83a03e5904f97e10b3e78761762556a4a6e71f79f393bda2b455c3b5N

  • Size

    693KB

  • Sample

    241012-dmnvzstgml

  • MD5

    9d42aa1ad3f6f3553b9740be837b57f0

  • SHA1

    cc9f673ce0714dfbc2adee403c35089a9f4b8c6b

  • SHA256

    9b005b4b83a03e5904f97e10b3e78761762556a4a6e71f79f393bda2b455c3b5

  • SHA512

    ee75854fd63bf32c85ece10a25a1e7a739f7c2de5d0ea60b74ae8387f96f9ff3cbfd7907d6c1f8b0b2796e7083ba611afdf1505ab42bd7a6bd8c39d59f5c42fc

  • SSDEEP

    12288:YKuwKR6O38ZGljPyeUtGsxWBm9Qb6ftvlNegqYwvcDO+hqRyhkWY2W9xY/RI:YKrwd2eoiQT/vYkDO+4Ryhm2WUJI

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      9b005b4b83a03e5904f97e10b3e78761762556a4a6e71f79f393bda2b455c3b5N

    • Size

      693KB

    • MD5

      9d42aa1ad3f6f3553b9740be837b57f0

    • SHA1

      cc9f673ce0714dfbc2adee403c35089a9f4b8c6b

    • SHA256

      9b005b4b83a03e5904f97e10b3e78761762556a4a6e71f79f393bda2b455c3b5

    • SHA512

      ee75854fd63bf32c85ece10a25a1e7a739f7c2de5d0ea60b74ae8387f96f9ff3cbfd7907d6c1f8b0b2796e7083ba611afdf1505ab42bd7a6bd8c39d59f5c42fc

    • SSDEEP

      12288:YKuwKR6O38ZGljPyeUtGsxWBm9Qb6ftvlNegqYwvcDO+hqRyhkWY2W9xY/RI:YKrwd2eoiQT/vYkDO+4Ryhm2WUJI

    Score
    7/10
    discoverypersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks