Overview

overview

10

Static

static

10

source_prepared.exe

windows11-21h2-x64

8

Resubmissions

17-12-2024 03:07

241217-dmcsqazkem 10

17-12-2024 02:25

241217-cwfejaxnbw 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    source_prepared.exe

  • Size

    76.8MB

  • Sample

    241217-cwfejaxnbw

  • MD5

    d1ecceccf2a7935275e46fe740d2a944

  • SHA1

    1ed614b0a2a9d692aa0b20e15f7b4a939a3f3567

  • SHA256

    67b4f7f2756131f35a18c000da64c1e43defa7dfbfe7caafad100dd88ae4c6fd

  • SHA512

    1d682440ba803782695bca229d659b3a0b1d2b4ca7d3436f0671cc4f16151bdfcfd1e81d1dfd56e1ef9d1ac3ea66cb929dd7fb3de68a5faac6ef3ec5eb216bad

  • SSDEEP

    1572864:e1laWsXmUSk8IpG7V+VPhqYdfzE71lhBiYweyJulZUdg2rU3VdGqZ9UW:e1ARmUSkB05awcfMLGpuSre9U

Score
10/10
pysilonevasionexecutionpersistencepyinstallerupx

Malware Config

Targets

    • Target

      source_prepared.exe

    • Size

      76.8MB

    • MD5

      d1ecceccf2a7935275e46fe740d2a944

    • SHA1

      1ed614b0a2a9d692aa0b20e15f7b4a939a3f3567

    • SHA256

      67b4f7f2756131f35a18c000da64c1e43defa7dfbfe7caafad100dd88ae4c6fd

    • SHA512

      1d682440ba803782695bca229d659b3a0b1d2b4ca7d3436f0671cc4f16151bdfcfd1e81d1dfd56e1ef9d1ac3ea66cb929dd7fb3de68a5faac6ef3ec5eb216bad

    • SSDEEP

      1572864:e1laWsXmUSk8IpG7V+VPhqYdfzE71lhBiYweyJulZUdg2rU3VdGqZ9UW:e1ARmUSkB05awcfMLGpuSre9U

    Score
    8/10
    evasionexecutionpersistenceupx

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks