Overview

overview

10

Static

static

10

37982668a9...fc.dll

windows7-x64

8

37982668a9...fc.dll

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37982668a90f7f8181f6f00a3873046f98a31ce9d8dbd11d136ed908dbe764fc

  • Size

    76KB

  • Sample

    250103-1sg1ysxrek

  • MD5

    a6c1b5d0a353309537f643173198425d

  • SHA1

    d65511e238cf98e68c736160160114caf64cf262

  • SHA256

    37982668a90f7f8181f6f00a3873046f98a31ce9d8dbd11d136ed908dbe764fc

  • SHA512

    e1ee6ff4feeef81868342c3ff3fc258408381e831f606df89a55d08470180256ea27889a16eb95bf6de5e0f5d2d2c74c118e9ff036a9f015f4d7dbb02d201903

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZJRmrBH9hH:c8y93KQjy7G55riF1cMo03PoVz

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      37982668a90f7f8181f6f00a3873046f98a31ce9d8dbd11d136ed908dbe764fc

    • Size

      76KB

    • MD5

      a6c1b5d0a353309537f643173198425d

    • SHA1

      d65511e238cf98e68c736160160114caf64cf262

    • SHA256

      37982668a90f7f8181f6f00a3873046f98a31ce9d8dbd11d136ed908dbe764fc

    • SHA512

      e1ee6ff4feeef81868342c3ff3fc258408381e831f606df89a55d08470180256ea27889a16eb95bf6de5e0f5d2d2c74c118e9ff036a9f015f4d7dbb02d201903

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZJRmrBH9hH:c8y93KQjy7G55riF1cMo03PoVz

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks