Overview

overview

10

Static

static

5

ff9e77cbad...ed.exe

windows7-x64

10

ff9e77cbad...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff9e77cbadf1c27e6e582bf7ee201b633a50390ed29a6300b79815e91151e5ed.exe

  • Size

    6.5MB

  • Sample

    241120-1c1s5atckf

  • MD5

    b25c805e405789598bea9999dcafcd86

  • SHA1

    4318d8e691d48e2c66aebb0a8bf651dd60cac702

  • SHA256

    ff9e77cbadf1c27e6e582bf7ee201b633a50390ed29a6300b79815e91151e5ed

  • SHA512

    c8e456fec1ff720a2e86b4edc37322fc02d06c8709cfde156d98856a0025e1a5a76638dce8c89a14e4ea81ed782664f0de6cc0c65e548fa7815d5930e45fd08f

  • SSDEEP

    98304:dE35cEiE35cEIE35cE7E35cE6E35cESE35cESE35cEzE35cENE35cEnE35cELE3f:p

Score
10/10
discoveryevasionupx

Malware Config

Targets

    • Target

      ff9e77cbadf1c27e6e582bf7ee201b633a50390ed29a6300b79815e91151e5ed.exe

    • Size

      6.5MB

    • MD5

      b25c805e405789598bea9999dcafcd86

    • SHA1

      4318d8e691d48e2c66aebb0a8bf651dd60cac702

    • SHA256

      ff9e77cbadf1c27e6e582bf7ee201b633a50390ed29a6300b79815e91151e5ed

    • SHA512

      c8e456fec1ff720a2e86b4edc37322fc02d06c8709cfde156d98856a0025e1a5a76638dce8c89a14e4ea81ed782664f0de6cc0c65e548fa7815d5930e45fd08f

    • SSDEEP

      98304:dE35cEiE35cEIE35cE7E35cE6E35cESE35cESE35cEzE35cENE35cEnE35cELE3f:p

    Score
    10/10
    discoveryevasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks