Overview

overview

10

Static

static

10

8bdd484400...bN.dll

windows7-x64

8

8bdd484400...bN.dll

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8bdd484400f707cb401b4d354039dc08b4d5603f75799a1374100c1bfb7d031bN.exe

  • Size

    80KB

  • Sample

    250107-d1f3asskc1

  • MD5

    c7f3377444bf889f1e0ed4943f0a6650

  • SHA1

    cc528788fac8a5f1db4635abd21bce83c16ef786

  • SHA256

    8bdd484400f707cb401b4d354039dc08b4d5603f75799a1374100c1bfb7d031b

  • SHA512

    feb5062fb4a28d69ac109fd9c01a53c648e2e7a8fccf967ef18806faf13d26a69448555eba7f9ac430c189e99bed845fc3404d3882b7e61d56292a6ddd87b883

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEd:5dbwovEVyqgoZmZXWfIdQdRaefPC

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      8bdd484400f707cb401b4d354039dc08b4d5603f75799a1374100c1bfb7d031bN.exe

    • Size

      80KB

    • MD5

      c7f3377444bf889f1e0ed4943f0a6650

    • SHA1

      cc528788fac8a5f1db4635abd21bce83c16ef786

    • SHA256

      8bdd484400f707cb401b4d354039dc08b4d5603f75799a1374100c1bfb7d031b

    • SHA512

      feb5062fb4a28d69ac109fd9c01a53c648e2e7a8fccf967ef18806faf13d26a69448555eba7f9ac430c189e99bed845fc3404d3882b7e61d56292a6ddd87b883

    • SSDEEP

      1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEd:5dbwovEVyqgoZmZXWfIdQdRaefPC

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Blocklisted process makes network request

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Network Service Discovery

      Attempt to gather information on host's network.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks