Overview

overview

10

Static

static

10

eeeb3564c2...bN.dll

windows7-x64

5

eeeb3564c2...bN.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eeeb3564c204e59d213c269907a5ec310c49c29c699936b0191e6d5e0ab034dbN.exe

  • Size

    76KB

  • Sample

    241119-m81akszncp

  • MD5

    fe1b69143f0adde974578af565663fb0

  • SHA1

    e7bed341ed9ee19678f3d60657d2552003289c2f

  • SHA256

    eeeb3564c204e59d213c269907a5ec310c49c29c699936b0191e6d5e0ab034db

  • SHA512

    d6b708e717468e790dd9e1d6fd0714fae7fb07e063a683e098770863cc75d1a6f55c20e5e461b1a76bcfc9d8ccd2ec3a0f16a63f50e0939528613ab330dc3ea0

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZG5KSg6Z:c8y93KQjy7G55riF1cMo03c5KSv

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      eeeb3564c204e59d213c269907a5ec310c49c29c699936b0191e6d5e0ab034dbN.exe

    • Size

      76KB

    • MD5

      fe1b69143f0adde974578af565663fb0

    • SHA1

      e7bed341ed9ee19678f3d60657d2552003289c2f

    • SHA256

      eeeb3564c204e59d213c269907a5ec310c49c29c699936b0191e6d5e0ab034db

    • SHA512

      d6b708e717468e790dd9e1d6fd0714fae7fb07e063a683e098770863cc75d1a6f55c20e5e461b1a76bcfc9d8ccd2ec3a0f16a63f50e0939528613ab330dc3ea0

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZG5KSg6Z:c8y93KQjy7G55riF1cMo03c5KSv

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks