Overview

overview

10

Static

static

10

5973714f10...9e.dll

windows7-x64

5

5973714f10...9e.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5973714f10eac5263d0da59fec83b997b0826f81348da9c753cfac055b56d49e

  • Size

    76KB

  • Sample

    241224-2ef26szjck

  • MD5

    a54b24c16ba3b2d0590a28f69de46933

  • SHA1

    4a69bc6d1fdc2769434633f0bc08db8a7824eacf

  • SHA256

    5973714f10eac5263d0da59fec83b997b0826f81348da9c753cfac055b56d49e

  • SHA512

    b71e47cb94b24c14607b344c63e1a256482faff2731f9ebca9d00f8537657c401e3c800cf74cc8754edd4546a8bc0c1c708bda95bc4762f28ad6d2971b0272b3

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZTI61ububOo:c8y93KQjy7G55riF1cMo03Kg

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      5973714f10eac5263d0da59fec83b997b0826f81348da9c753cfac055b56d49e

    • Size

      76KB

    • MD5

      a54b24c16ba3b2d0590a28f69de46933

    • SHA1

      4a69bc6d1fdc2769434633f0bc08db8a7824eacf

    • SHA256

      5973714f10eac5263d0da59fec83b997b0826f81348da9c753cfac055b56d49e

    • SHA512

      b71e47cb94b24c14607b344c63e1a256482faff2731f9ebca9d00f8537657c401e3c800cf74cc8754edd4546a8bc0c1c708bda95bc4762f28ad6d2971b0272b3

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZTI61ububOo:c8y93KQjy7G55riF1cMo03Kg

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks