Overview

overview

7

Static

static

3

44da04ee0c...1N.exe

windows7-x64

7

44da04ee0c...1N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    44da04ee0cb491857facd4830ed8207f705b3d4bf7fbddef4d6d0b7893d2ef21N

  • Size

    693KB

  • Sample

    241012-xwtmdawhkh

  • MD5

    f7a5362e1728f76e1651d553a1809170

  • SHA1

    1bf144bbb33273ac577fe857cdf28253c529117d

  • SHA256

    44da04ee0cb491857facd4830ed8207f705b3d4bf7fbddef4d6d0b7893d2ef21

  • SHA512

    df02dfa3dac62f2d8d46e86a45251c84e0faf42283ddfb606e08222f467da349b013b49dcd69e803c4997cdff596aab3127c083f0f23120992ca178231b16b7a

  • SSDEEP

    12288:YKuwhR6O38ZGljXN1omcA5rs3MBis4h8EHb6N/25dMB2tuMkmfa+nmf0Rj:YKr3dJ1Dx5rZBiz8E2NOrMB0fmWj

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      44da04ee0cb491857facd4830ed8207f705b3d4bf7fbddef4d6d0b7893d2ef21N

    • Size

      693KB

    • MD5

      f7a5362e1728f76e1651d553a1809170

    • SHA1

      1bf144bbb33273ac577fe857cdf28253c529117d

    • SHA256

      44da04ee0cb491857facd4830ed8207f705b3d4bf7fbddef4d6d0b7893d2ef21

    • SHA512

      df02dfa3dac62f2d8d46e86a45251c84e0faf42283ddfb606e08222f467da349b013b49dcd69e803c4997cdff596aab3127c083f0f23120992ca178231b16b7a

    • SSDEEP

      12288:YKuwhR6O38ZGljXN1omcA5rs3MBis4h8EHb6N/25dMB2tuMkmfa+nmf0Rj:YKr3dJ1Dx5rZBiz8E2NOrMB0fmWj

    Score
    7/10
    discoverypersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks