Overview

overview

10

Static

static

10

38c75c4dce...58.dll

windows7-x64

8

38c75c4dce...58.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    38c75c4dcefa514369927f01f7ef486f381621d65cf4b1c50afcfdc432d30858

  • Size

    76KB

  • Sample

    241120-1tam9stera

  • MD5

    3b2e02063d4449d14a6824d550f032c9

  • SHA1

    970f82f88a654e0e3b8397369ddfc5613841a19c

  • SHA256

    38c75c4dcefa514369927f01f7ef486f381621d65cf4b1c50afcfdc432d30858

  • SHA512

    0145a7c398b708d84f34c9bef3aaa26231a2dbe6eac32a5f87a98b483407f772428d9b8fabb84014e0eb1a8b6edb25d91fad0ebbac573a1073a8cb9640ae11ea

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zi+eO4:c8y93KQjy7G55riF1cMo03QFl

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      38c75c4dcefa514369927f01f7ef486f381621d65cf4b1c50afcfdc432d30858

    • Size

      76KB

    • MD5

      3b2e02063d4449d14a6824d550f032c9

    • SHA1

      970f82f88a654e0e3b8397369ddfc5613841a19c

    • SHA256

      38c75c4dcefa514369927f01f7ef486f381621d65cf4b1c50afcfdc432d30858

    • SHA512

      0145a7c398b708d84f34c9bef3aaa26231a2dbe6eac32a5f87a98b483407f772428d9b8fabb84014e0eb1a8b6edb25d91fad0ebbac573a1073a8cb9640ae11ea

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zi+eO4:c8y93KQjy7G55riF1cMo03QFl

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks