Overview

overview

10

Static

static

10

72866a0f93...65.dll

windows7-x64

8

72866a0f93...65.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72866a0f93e281373385e44e2047064c55dae4991c04d973b86beee6b1f24865

  • Size

    80KB

  • Sample

    250102-atkv5asrew

  • MD5

    2279861fb0e91f69c6b9b66df611f4ea

  • SHA1

    84b24b90cbde33ff884456bb00d0dccf0cc67a0d

  • SHA256

    72866a0f93e281373385e44e2047064c55dae4991c04d973b86beee6b1f24865

  • SHA512

    db4eeab1f2cc90e86b1a4038f716056879458d40533f0b6c96085d55bca50dbd47177756f78297a8693952af2dbca79095beacf7ef54f4e3f87f3a3f1f90a8e1

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEOAeIc5:5dbwovEVyqgoZmZXWfIdQdRaefP5AvW

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      72866a0f93e281373385e44e2047064c55dae4991c04d973b86beee6b1f24865

    • Size

      80KB

    • MD5

      2279861fb0e91f69c6b9b66df611f4ea

    • SHA1

      84b24b90cbde33ff884456bb00d0dccf0cc67a0d

    • SHA256

      72866a0f93e281373385e44e2047064c55dae4991c04d973b86beee6b1f24865

    • SHA512

      db4eeab1f2cc90e86b1a4038f716056879458d40533f0b6c96085d55bca50dbd47177756f78297a8693952af2dbca79095beacf7ef54f4e3f87f3a3f1f90a8e1

    • SSDEEP

      1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEOAeIc5:5dbwovEVyqgoZmZXWfIdQdRaefP5AvW

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Network Service Discovery

      Attempt to gather information on host's network.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks