Overview

overview

10

Static

static

10

f17ad967cd...b7.dll

windows7-x64

5

f17ad967cd...b7.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f17ad967cd09bdfff2ea1ae7f0cca86d43ce2027e801536ac39c38189e086cb7

  • Size

    76KB

  • Sample

    241227-e1zeba1qfz

  • MD5

    c2477b9480af3dc8dc64dc8b1add0a84

  • SHA1

    c76e2d50c4e4db8278abce29a8ce543460256777

  • SHA256

    f17ad967cd09bdfff2ea1ae7f0cca86d43ce2027e801536ac39c38189e086cb7

  • SHA512

    09d473c24a8ddfed47f38a4c61e76c7c1e260cc0e1810767b5396096c6f2f0f3d4ee97cca4c9b7acaca4c30502e521daa55f79cd6fdf93cb2189ecba9bcdfb5c

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z9RbEw:c8y93KQjy7G55riF1cMo03/Rbj

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      f17ad967cd09bdfff2ea1ae7f0cca86d43ce2027e801536ac39c38189e086cb7

    • Size

      76KB

    • MD5

      c2477b9480af3dc8dc64dc8b1add0a84

    • SHA1

      c76e2d50c4e4db8278abce29a8ce543460256777

    • SHA256

      f17ad967cd09bdfff2ea1ae7f0cca86d43ce2027e801536ac39c38189e086cb7

    • SHA512

      09d473c24a8ddfed47f38a4c61e76c7c1e260cc0e1810767b5396096c6f2f0f3d4ee97cca4c9b7acaca4c30502e521daa55f79cd6fdf93cb2189ecba9bcdfb5c

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z9RbEw:c8y93KQjy7G55riF1cMo03/Rbj

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks