Overview

overview

10

Static

static

10

12f72e6ba4...a3.dll

windows7-x64

8

12f72e6ba4...a3.dll

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12f72e6ba4108b1e9e421e69b3b10c19f340c9c0605c2773dc9618f12a14a8a3

  • Size

    76KB

  • Sample

    241226-yqnplsxnhp

  • MD5

    89e25c406f3119bdd998649c90546ec7

  • SHA1

    a14268a59f04ad4b825831868ff67c63b9dcbc9f

  • SHA256

    12f72e6ba4108b1e9e421e69b3b10c19f340c9c0605c2773dc9618f12a14a8a3

  • SHA512

    dabd59a333f5638524014ae8e7a88404612e400dc13a0573c069c845989b1aff45e5cc48c465f77124f689ac843c6f72d3b54f824e884f8e95e7ea0caccd52fd

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZCUg:c8y93KQjy7G55riF1cMo03AUg

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      12f72e6ba4108b1e9e421e69b3b10c19f340c9c0605c2773dc9618f12a14a8a3

    • Size

      76KB

    • MD5

      89e25c406f3119bdd998649c90546ec7

    • SHA1

      a14268a59f04ad4b825831868ff67c63b9dcbc9f

    • SHA256

      12f72e6ba4108b1e9e421e69b3b10c19f340c9c0605c2773dc9618f12a14a8a3

    • SHA512

      dabd59a333f5638524014ae8e7a88404612e400dc13a0573c069c845989b1aff45e5cc48c465f77124f689ac843c6f72d3b54f824e884f8e95e7ea0caccd52fd

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZCUg:c8y93KQjy7G55riF1cMo03AUg

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks