Overview

overview

10

Static

static

10

cc570205d9...fe.dll

windows7-x64

5

cc570205d9...fe.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc570205d9d2cf8deca1d8ed20f9241a8b0e468ded433307dbb9a37fe8b812fe.exe

  • Size

    203KB

  • Sample

    241226-sxykhaynas

  • MD5

    8b095e6d884ea8850036780e38545fe0

  • SHA1

    28129df484a903db5245b485ed540d0ba078b402

  • SHA256

    cc570205d9d2cf8deca1d8ed20f9241a8b0e468ded433307dbb9a37fe8b812fe

  • SHA512

    bfcd39389144d5e8e4165efcf5cc2af9967f3328b829cec8205345fb5e314856477434bf381f7f1190c4c8c479eb4dd6ca5b3848c9f6433228e71db71031e029

  • SSDEEP

    3072:hJ8IMILmCa3yx6oFEdgVXnFYf7C9Ugfxm3Nep9viMqh:0kmCaiEoFEd+FYOtxmdeviMqh

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      cc570205d9d2cf8deca1d8ed20f9241a8b0e468ded433307dbb9a37fe8b812fe.exe

    • Size

      203KB

    • MD5

      8b095e6d884ea8850036780e38545fe0

    • SHA1

      28129df484a903db5245b485ed540d0ba078b402

    • SHA256

      cc570205d9d2cf8deca1d8ed20f9241a8b0e468ded433307dbb9a37fe8b812fe

    • SHA512

      bfcd39389144d5e8e4165efcf5cc2af9967f3328b829cec8205345fb5e314856477434bf381f7f1190c4c8c479eb4dd6ca5b3848c9f6433228e71db71031e029

    • SSDEEP

      3072:hJ8IMILmCa3yx6oFEdgVXnFYf7C9Ugfxm3Nep9viMqh:0kmCaiEoFEd+FYOtxmdeviMqh

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks