Overview

overview

10

Static

static

10

b23edb5a4d...3N.exe

windows7-x64

7

b23edb5a4d...3N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b23edb5a4d5796614ceb4b760f55bd0bb29b2ffc1af34b5613e1844a05c3dbe3N.exe

  • Size

    2.9MB

  • Sample

    241112-mtgjxs1ckq

  • MD5

    cbeffd949046aaa524798b4ae5ddc4f4

  • SHA1

    7ab957245072d44553c18420405863c2adc8bd74

  • SHA256

    5e42b98450fea49528736f56e2326f7d3edda2b5012ef20d00282d403aeed5f7

  • SHA512

    c273458921d6cf380532216529b2bffef512c8a2eff43173d21665bb9bb085f5c1ea490d1c389e9ae6b4bffee79da4f111386e833a8264c8293e9ce43d692518

  • SSDEEP

    24576:ATU7AAmZZcVKfIxTiEVc847flVC6faaQDbGV6eH81k6IbGD2JTu0GoZQDbGV6eHK:ATU7AAmw4gxeOw46fUbNecCCFbNecV

Score
10/10
warzoneratdiscoverypersistenceratupx

Malware Config

Targets

    • Target

      b23edb5a4d5796614ceb4b760f55bd0bb29b2ffc1af34b5613e1844a05c3dbe3N.exe

    • Size

      2.9MB

    • MD5

      cbeffd949046aaa524798b4ae5ddc4f4

    • SHA1

      7ab957245072d44553c18420405863c2adc8bd74

    • SHA256

      5e42b98450fea49528736f56e2326f7d3edda2b5012ef20d00282d403aeed5f7

    • SHA512

      c273458921d6cf380532216529b2bffef512c8a2eff43173d21665bb9bb085f5c1ea490d1c389e9ae6b4bffee79da4f111386e833a8264c8293e9ce43d692518

    • SSDEEP

      24576:ATU7AAmZZcVKfIxTiEVc847flVC6faaQDbGV6eH81k6IbGD2JTu0GoZQDbGV6eHK:ATU7AAmw4gxeOw46fUbNecCCFbNecV

    Score
    7/10
    discoverypersistenceupx

    • Drops startup file

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks