Overview

overview

10

Static

static

10

9f03a48c1c...9b.dll

windows7-x64

8

9f03a48c1c...9b.dll

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f03a48c1c2017156dcd120b3b57f48a5d85aece6a5ea967f96ff3947735439b.exe

  • Size

    76KB

  • Sample

    241217-j7klysvmg1

  • MD5

    242c0b4e71b35c5501825b3d281e0227

  • SHA1

    3b5c50c44f6357656f43d9eeea5ff3e723620ada

  • SHA256

    9f03a48c1c2017156dcd120b3b57f48a5d85aece6a5ea967f96ff3947735439b

  • SHA512

    061e8bd3a5759dba7c854b7801fec5776412faff45c3873bbde1c571cdabf4df8c39e60596f745d6fbcf261791defbe9b8add154c8582e347ccb9ed058b62994

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZaVheqz:c8y93KQjy7G55riF1cMo03eheqz

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      9f03a48c1c2017156dcd120b3b57f48a5d85aece6a5ea967f96ff3947735439b.exe

    • Size

      76KB

    • MD5

      242c0b4e71b35c5501825b3d281e0227

    • SHA1

      3b5c50c44f6357656f43d9eeea5ff3e723620ada

    • SHA256

      9f03a48c1c2017156dcd120b3b57f48a5d85aece6a5ea967f96ff3947735439b

    • SHA512

      061e8bd3a5759dba7c854b7801fec5776412faff45c3873bbde1c571cdabf4df8c39e60596f745d6fbcf261791defbe9b8add154c8582e347ccb9ed058b62994

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZaVheqz:c8y93KQjy7G55riF1cMo03eheqz

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks