Overview

overview

10

Static

static

10

358bd4c455...e9.dll

windows7-x64

8

358bd4c455...e9.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    358bd4c4551913bd25073fe4f922d2d281eeb0c03386a4272d42cac6cdd3ede9

  • Size

    76KB

  • Sample

    250102-1jlmsawqdz

  • MD5

    dfbbe57ce5402df6bb74f21a24729e1e

  • SHA1

    c23366ebc30a265ce298408a8fda36a42be9dc21

  • SHA256

    358bd4c4551913bd25073fe4f922d2d281eeb0c03386a4272d42cac6cdd3ede9

  • SHA512

    e93845015cc30bd51375e82a8524f3010be64d2ace40443f1c79ac5c201b0bf489b45ce9a31ad1583993555ecd16ade7e83ae727c7eb5ad9cd3e1d8c8b6aaf42

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZAHpfOa:c8y93KQjy7G55riF1cMo03mJfB

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      358bd4c4551913bd25073fe4f922d2d281eeb0c03386a4272d42cac6cdd3ede9

    • Size

      76KB

    • MD5

      dfbbe57ce5402df6bb74f21a24729e1e

    • SHA1

      c23366ebc30a265ce298408a8fda36a42be9dc21

    • SHA256

      358bd4c4551913bd25073fe4f922d2d281eeb0c03386a4272d42cac6cdd3ede9

    • SHA512

      e93845015cc30bd51375e82a8524f3010be64d2ace40443f1c79ac5c201b0bf489b45ce9a31ad1583993555ecd16ade7e83ae727c7eb5ad9cd3e1d8c8b6aaf42

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZAHpfOa:c8y93KQjy7G55riF1cMo03mJfB

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks