Overview

overview

10

Static

static

10

3935e4657e...5f.dll

windows7-x64

6

3935e4657e...5f.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3935e4657eecc40a26c28297fb43da88465aa01f454f3a7b3df2b76c91f4bd5f.exe

  • Size

    80KB

  • Sample

    241231-a8fvqawnbq

  • MD5

    024e5110e5808aa57bc1e3ad0c33f3d1

  • SHA1

    9a53cd292e9f80af799eb3f5ecc1a052316bb5fe

  • SHA256

    3935e4657eecc40a26c28297fb43da88465aa01f454f3a7b3df2b76c91f4bd5f

  • SHA512

    ee77d53e156d482e8e692ae6e84c755253eae2803e5be8202fc9bc1cea4f960e6285662a19bd26600021e32e4904065c526148571a56b9da75cd6668096859a2

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEF4n7r:5dbwovEVyqgoZmZXWfIdQdRaefPX

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      3935e4657eecc40a26c28297fb43da88465aa01f454f3a7b3df2b76c91f4bd5f.exe

    • Size

      80KB

    • MD5

      024e5110e5808aa57bc1e3ad0c33f3d1

    • SHA1

      9a53cd292e9f80af799eb3f5ecc1a052316bb5fe

    • SHA256

      3935e4657eecc40a26c28297fb43da88465aa01f454f3a7b3df2b76c91f4bd5f

    • SHA512

      ee77d53e156d482e8e692ae6e84c755253eae2803e5be8202fc9bc1cea4f960e6285662a19bd26600021e32e4904065c526148571a56b9da75cd6668096859a2

    • SSDEEP

      1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEF4n7r:5dbwovEVyqgoZmZXWfIdQdRaefPX

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Network Service Discovery

      Attempt to gather information on host's network.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks