Overview

overview

10

Static

static

10

b0ed7a2c8b...cf.dll

windows7-x64

8

b0ed7a2c8b...cf.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0ed7a2c8b0ab988ed7078130a6d94956ac809d675f4f195f93be159dde3fccf

  • Size

    76KB

  • Sample

    250106-gpaypaxrcv

  • MD5

    fc31b31d6a11f7b5f1454ca182a7e9bd

  • SHA1

    abf5c58441b2be77ab31d504fc3b6368092a6fb5

  • SHA256

    b0ed7a2c8b0ab988ed7078130a6d94956ac809d675f4f195f93be159dde3fccf

  • SHA512

    1cfcbf58545cdf489e9b8b6610636fd6e64ce7c488e85b917e80677e7bdb2ea27e0b4e6957cfaba99fa21a6e5428403a287adbc120f3a49d011e5e63be8ecc15

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZqFURcdNnQx:c8y93KQjy7G55riF1cMo03mLO

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      b0ed7a2c8b0ab988ed7078130a6d94956ac809d675f4f195f93be159dde3fccf

    • Size

      76KB

    • MD5

      fc31b31d6a11f7b5f1454ca182a7e9bd

    • SHA1

      abf5c58441b2be77ab31d504fc3b6368092a6fb5

    • SHA256

      b0ed7a2c8b0ab988ed7078130a6d94956ac809d675f4f195f93be159dde3fccf

    • SHA512

      1cfcbf58545cdf489e9b8b6610636fd6e64ce7c488e85b917e80677e7bdb2ea27e0b4e6957cfaba99fa21a6e5428403a287adbc120f3a49d011e5e63be8ecc15

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZqFURcdNnQx:c8y93KQjy7G55riF1cMo03mLO

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks