Overview

overview

10

Static

static

10

d06d9b1d30...24.dll

windows7-x64

8

d06d9b1d30...24.dll

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d06d9b1d30ddf8f0efc4d8ef5ea8c857a71658d1ed14e3db21cd71b2c041d124

  • Size

    76KB

  • Sample

    241228-dpm2gavlht

  • MD5

    a1fd81085dfe14392255d4fad4553f13

  • SHA1

    82b82f1f5a046f32c255fd7031774be15e5c72d0

  • SHA256

    d06d9b1d30ddf8f0efc4d8ef5ea8c857a71658d1ed14e3db21cd71b2c041d124

  • SHA512

    2b21f4adca1ac94432ec83a81dd3efcab4e5a3bae17ef27c703cc86a7f276cc0f25cc1dc3fc53315bd43ac03174a932171685327a42eafdaab2b412445aefb8d

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zn7pxY93zl4U:c8y93KQjy7G55riF1cMo03nxqDl4U

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      d06d9b1d30ddf8f0efc4d8ef5ea8c857a71658d1ed14e3db21cd71b2c041d124

    • Size

      76KB

    • MD5

      a1fd81085dfe14392255d4fad4553f13

    • SHA1

      82b82f1f5a046f32c255fd7031774be15e5c72d0

    • SHA256

      d06d9b1d30ddf8f0efc4d8ef5ea8c857a71658d1ed14e3db21cd71b2c041d124

    • SHA512

      2b21f4adca1ac94432ec83a81dd3efcab4e5a3bae17ef27c703cc86a7f276cc0f25cc1dc3fc53315bd43ac03174a932171685327a42eafdaab2b412445aefb8d

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zn7pxY93zl4U:c8y93KQjy7G55riF1cMo03nxqDl4U

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks