Overview

overview

5

Static

static

5

rufus-4.6p.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rufus-4.6p.exe

  • Size

    1.5MB

  • Sample

    241119-y12n8awqgl

  • MD5

    8fe64da09af371b02a31828415ece8f3

  • SHA1

    5b5c90dcd425c814b555a4567405601aa977ee0b

  • SHA256

    8279696c1d78b14618500e9135886a3667b9decc65946f3729002e4bfdbb20ab

  • SHA512

    e49f9b1c9d33364101ad2fd4f2c5ed030700cc941bb469cf2ce7d5b32c51cab9e62b265e05cbd92435453e7e4008c9990bea532298676f7d81e5d6dcdc2f590b

  • SSDEEP

    24576:H8U9+A6KdMt7ZRuYfuv9dTWGNj0GvXFGfkRssBUEt3kRQrf7zSIBDICweAVdEY2Y:cUUvltf6SGd/FGfIsTE665h0dEY2nY

Score
5/10
steamevasionphishingtrojanupx

Malware Config

Targets

    • Target

      rufus-4.6p.exe

    • Size

      1.5MB

    • MD5

      8fe64da09af371b02a31828415ece8f3

    • SHA1

      5b5c90dcd425c814b555a4567405601aa977ee0b

    • SHA256

      8279696c1d78b14618500e9135886a3667b9decc65946f3729002e4bfdbb20ab

    • SHA512

      e49f9b1c9d33364101ad2fd4f2c5ed030700cc941bb469cf2ce7d5b32c51cab9e62b265e05cbd92435453e7e4008c9990bea532298676f7d81e5d6dcdc2f590b

    • SSDEEP

      24576:H8U9+A6KdMt7ZRuYfuv9dTWGNj0GvXFGfkRssBUEt3kRQrf7zSIBDICweAVdEY2Y:cUUvltf6SGd/FGfIsTE665h0dEY2nY

    Score
    5/10
    steamevasionphishingtrojanupx

    • Detected potential entity reuse from brand STEAM.

      phishingsteam

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks