Overview

overview

7

Static

static

5

cf28f40e7d...ca.exe

windows7-x64

7

cf28f40e7d...ca.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf28f40e7d3c1a0ed4c461d0c1d89bb9dfb3e3e0fe5e27ef81e5098be8d852ca

  • Size

    3.5MB

  • Sample

    241119-xrhpbavphp

  • MD5

    e7c183620a2bc16aff6815096913fc49

  • SHA1

    d9580ede84a5fd2e79d0f055219d720d0d943c8e

  • SHA256

    cf28f40e7d3c1a0ed4c461d0c1d89bb9dfb3e3e0fe5e27ef81e5098be8d852ca

  • SHA512

    bf5a1d48952db6a879211068512a4d2704e824a9d3d0d5566f3b3b1e150e686c40ea12c7adcd24623cf851846cf9b13b753377ceef757dfc170426781ec8442b

  • SSDEEP

    49152:zv26srWDXTpLrTCwNvWVXIswbvYJ9lpbQudI4XFKnAXUq7kOkqGTglRU8Kove1gz:zvCVVYsGdO7XmoSdndSgAGY

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      cf28f40e7d3c1a0ed4c461d0c1d89bb9dfb3e3e0fe5e27ef81e5098be8d852ca

    • Size

      3.5MB

    • MD5

      e7c183620a2bc16aff6815096913fc49

    • SHA1

      d9580ede84a5fd2e79d0f055219d720d0d943c8e

    • SHA256

      cf28f40e7d3c1a0ed4c461d0c1d89bb9dfb3e3e0fe5e27ef81e5098be8d852ca

    • SHA512

      bf5a1d48952db6a879211068512a4d2704e824a9d3d0d5566f3b3b1e150e686c40ea12c7adcd24623cf851846cf9b13b753377ceef757dfc170426781ec8442b

    • SSDEEP

      49152:zv26srWDXTpLrTCwNvWVXIswbvYJ9lpbQudI4XFKnAXUq7kOkqGTglRU8Kove1gz:zvCVVYsGdO7XmoSdndSgAGY

    Score
    7/10
    discoveryupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks