Overview

overview

10

Static

static

10

fd02a0881a...ef.dll

windows7-x64

5

fd02a0881a...ef.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd02a0881a26b6d26d0eaaba6034726b0a93672188a2f5ff5391918b258ffaef.exe

  • Size

    76KB

  • Sample

    241211-dg33qatjbx

  • MD5

    005cf2b40208331666a1c0bb513d50ab

  • SHA1

    ac3cff4bb29e1de90c411b1504b0ff126ec22e36

  • SHA256

    fd02a0881a26b6d26d0eaaba6034726b0a93672188a2f5ff5391918b258ffaef

  • SHA512

    aa124095f32fb4029a2c8b48fc19371fefef514849018fe29a1f5cdd01ac88b8f045790400ba12b88dcc21e06c29d9f93fa5ef8e1347df2b07d29cdee4ee2290

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z6ZuNz3E:c8y93KQjy7G55riF1cMo035x0

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      fd02a0881a26b6d26d0eaaba6034726b0a93672188a2f5ff5391918b258ffaef.exe

    • Size

      76KB

    • MD5

      005cf2b40208331666a1c0bb513d50ab

    • SHA1

      ac3cff4bb29e1de90c411b1504b0ff126ec22e36

    • SHA256

      fd02a0881a26b6d26d0eaaba6034726b0a93672188a2f5ff5391918b258ffaef

    • SHA512

      aa124095f32fb4029a2c8b48fc19371fefef514849018fe29a1f5cdd01ac88b8f045790400ba12b88dcc21e06c29d9f93fa5ef8e1347df2b07d29cdee4ee2290

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z6ZuNz3E:c8y93KQjy7G55riF1cMo035x0

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks