Overview

overview

8

Static

static

5

f7b3a789d4...22.exe

windows7-x64

8

f7b3a789d4...22.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7b3a789d4dd0646f8e7969b8a16745fe0d698dfac86cc2486f8f748c3f7c522

  • Size

    448KB

  • Sample

    241121-p29a1swqhk

  • MD5

    a016a96a4606bccd442a2f7a2fb129a0

  • SHA1

    85d8ff318aae5c70bba25c1bec6df91bdf4bfaa3

  • SHA256

    f7b3a789d4dd0646f8e7969b8a16745fe0d698dfac86cc2486f8f748c3f7c522

  • SHA512

    15c52f89f97c34c2278077e1bd8cb201e001955fa23b2699e941e0e8f8524796e74104078ff002ae7c015ca26b1abe7396e4a1e29a5b139e5b62a6291d03a0f2

  • SSDEEP

    6144:i4/LuS+WcPmKmsEsY9RqSs3JqyiZdMFKF:PL25msWs3AN

Score
8/10
discoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      f7b3a789d4dd0646f8e7969b8a16745fe0d698dfac86cc2486f8f748c3f7c522

    • Size

      448KB

    • MD5

      a016a96a4606bccd442a2f7a2fb129a0

    • SHA1

      85d8ff318aae5c70bba25c1bec6df91bdf4bfaa3

    • SHA256

      f7b3a789d4dd0646f8e7969b8a16745fe0d698dfac86cc2486f8f748c3f7c522

    • SHA512

      15c52f89f97c34c2278077e1bd8cb201e001955fa23b2699e941e0e8f8524796e74104078ff002ae7c015ca26b1abe7396e4a1e29a5b139e5b62a6291d03a0f2

    • SSDEEP

      6144:i4/LuS+WcPmKmsEsY9RqSs3JqyiZdMFKF:PL25msWs3AN

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks