Overview

overview

10

Static

static

10

2d413f2f7c...97.dll

windows7-x64

5

2d413f2f7c...97.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d413f2f7c8c86c8ef1ece211f61a3c46db7dc4b95b3e574aecd02d7b7500697

  • Size

    76KB

  • Sample

    241222-zvjrwsypbs

  • MD5

    abb6c26e1012ed58b0c9a5a0e61ab12f

  • SHA1

    b571341703cece919cac1ea0e303d7d5011c1b6d

  • SHA256

    2d413f2f7c8c86c8ef1ece211f61a3c46db7dc4b95b3e574aecd02d7b7500697

  • SHA512

    a6ac72404a198059360a7842dc945e23438c22ced57f1329267cb91f466c0b42e5259cc1dc8e0404e3db6dc3c60ededfb417126c85f3d150f0262da289e32f91

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZEuD9wvVdNy:c8y93KQjy7G55riF1cMo03quDu9dNy

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      2d413f2f7c8c86c8ef1ece211f61a3c46db7dc4b95b3e574aecd02d7b7500697

    • Size

      76KB

    • MD5

      abb6c26e1012ed58b0c9a5a0e61ab12f

    • SHA1

      b571341703cece919cac1ea0e303d7d5011c1b6d

    • SHA256

      2d413f2f7c8c86c8ef1ece211f61a3c46db7dc4b95b3e574aecd02d7b7500697

    • SHA512

      a6ac72404a198059360a7842dc945e23438c22ced57f1329267cb91f466c0b42e5259cc1dc8e0404e3db6dc3c60ededfb417126c85f3d150f0262da289e32f91

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZEuD9wvVdNy:c8y93KQjy7G55riF1cMo03quDu9dNy

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks