Overview

overview

10

Static

static

10

41bea3af14...0e.dll

windows7-x64

5

41bea3af14...0e.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41bea3af1481086136d86ef3b3649521c651f81da1e34be7abf6877fe2bbab0e

  • Size

    76KB

  • Sample

    250105-274c6s1kcm

  • MD5

    eed5a322b75ab09a737c7d549f9b4eb1

  • SHA1

    b023d3fad2ff953de9e38a62ddb883fe22c0c991

  • SHA256

    41bea3af1481086136d86ef3b3649521c651f81da1e34be7abf6877fe2bbab0e

  • SHA512

    1b09e99d476e735f109fd3d69127d3938e5e7cb4e6b5cbbf4cce6ac4e799f7a16a86b745b96d61aec9e31e8dd6a4b9b4d0f7202bc8ca7f265d3f81632ec5a458

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZUYN7z:c8y93KQjy7G55riF1cMo03Ci

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      41bea3af1481086136d86ef3b3649521c651f81da1e34be7abf6877fe2bbab0e

    • Size

      76KB

    • MD5

      eed5a322b75ab09a737c7d549f9b4eb1

    • SHA1

      b023d3fad2ff953de9e38a62ddb883fe22c0c991

    • SHA256

      41bea3af1481086136d86ef3b3649521c651f81da1e34be7abf6877fe2bbab0e

    • SHA512

      1b09e99d476e735f109fd3d69127d3938e5e7cb4e6b5cbbf4cce6ac4e799f7a16a86b745b96d61aec9e31e8dd6a4b9b4d0f7202bc8ca7f265d3f81632ec5a458

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZUYN7z:c8y93KQjy7G55riF1cMo03Ci

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks