Overview

overview

10

Static

static

10

7c6bbddb74...eN.dll

windows7-x64

8

7c6bbddb74...eN.dll

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7c6bbddb746338244f552b95a64875e472bfcedad4e1bec0bf7ee0ce4f078abeN.exe

  • Size

    76KB

  • Sample

    241216-lnhz5avlhw

  • MD5

    90d1caf8870b40d4b2317399a5351f00

  • SHA1

    006d88e7e6ea68e2b914ef6ab5c63d1f4f377bce

  • SHA256

    7c6bbddb746338244f552b95a64875e472bfcedad4e1bec0bf7ee0ce4f078abe

  • SHA512

    880c4ddc38b1bd73645796a19ef197e159c62f221da8ef7ff99d169267a210a9336c35a74eee1d413135f73448a0e2ee95206d309a8d459883d6314fdfda9bd4

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZFEbVr:c8y93KQjy7G55riF1cMo03+p

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      7c6bbddb746338244f552b95a64875e472bfcedad4e1bec0bf7ee0ce4f078abeN.exe

    • Size

      76KB

    • MD5

      90d1caf8870b40d4b2317399a5351f00

    • SHA1

      006d88e7e6ea68e2b914ef6ab5c63d1f4f377bce

    • SHA256

      7c6bbddb746338244f552b95a64875e472bfcedad4e1bec0bf7ee0ce4f078abe

    • SHA512

      880c4ddc38b1bd73645796a19ef197e159c62f221da8ef7ff99d169267a210a9336c35a74eee1d413135f73448a0e2ee95206d309a8d459883d6314fdfda9bd4

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZFEbVr:c8y93KQjy7G55riF1cMo03+p

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks