Overview

overview

10

Static

static

10

64d8fe1dfb...1N.dll

windows7-x64

8

64d8fe1dfb...1N.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64d8fe1dfb454261e90922950d947f46db6fa015e55d32f78b901a547729b821N.exe

  • Size

    76KB

  • Sample

    241216-regctsskhw

  • MD5

    e720cf5d8333b991d1ded4b80f4a4d80

  • SHA1

    855972353846265aaee19bd4c568c1fcdf88a3cd

  • SHA256

    64d8fe1dfb454261e90922950d947f46db6fa015e55d32f78b901a547729b821

  • SHA512

    c8903793716a7c99fc30590e8992dbb39efa9dbddbf23040bcc054bdca86bb60d08abfc974557a5717b0119fe436a1cc4c0bfcb53f0752f1cc304ea9ba08b3e5

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zyp9kJXZ6:c8y93KQjy7G55riF1cMo03NJXZ6

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      64d8fe1dfb454261e90922950d947f46db6fa015e55d32f78b901a547729b821N.exe

    • Size

      76KB

    • MD5

      e720cf5d8333b991d1ded4b80f4a4d80

    • SHA1

      855972353846265aaee19bd4c568c1fcdf88a3cd

    • SHA256

      64d8fe1dfb454261e90922950d947f46db6fa015e55d32f78b901a547729b821

    • SHA512

      c8903793716a7c99fc30590e8992dbb39efa9dbddbf23040bcc054bdca86bb60d08abfc974557a5717b0119fe436a1cc4c0bfcb53f0752f1cc304ea9ba08b3e5

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zyp9kJXZ6:c8y93KQjy7G55riF1cMo03NJXZ6

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks