Overview

overview

10

Static

static

10

cafac25017...8f.dll

windows7-x64

5

cafac25017...8f.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cafac2501746c0474fcad20551604dc357a7c344f532baa7f55e2b231192848f.exe

  • Size

    76KB

  • Sample

    250108-p3spnasqfr

  • MD5

    b1e329c0d55908dadb9d30ca4fd0e450

  • SHA1

    66d84c3669b51ee8e13d035ea8f3c99645e05820

  • SHA256

    cafac2501746c0474fcad20551604dc357a7c344f532baa7f55e2b231192848f

  • SHA512

    eeb0cc4c44b3688dbbb759636ca559802d6733cf287e96677e3ced482e7dc43acfa4970fa8b13295bad29a98326857cf20726ebb608cdcd3b26b47fff4b7b431

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZDraG4Zk:c8y93KQjy7G55riF1cMo03M8

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      cafac2501746c0474fcad20551604dc357a7c344f532baa7f55e2b231192848f.exe

    • Size

      76KB

    • MD5

      b1e329c0d55908dadb9d30ca4fd0e450

    • SHA1

      66d84c3669b51ee8e13d035ea8f3c99645e05820

    • SHA256

      cafac2501746c0474fcad20551604dc357a7c344f532baa7f55e2b231192848f

    • SHA512

      eeb0cc4c44b3688dbbb759636ca559802d6733cf287e96677e3ced482e7dc43acfa4970fa8b13295bad29a98326857cf20726ebb608cdcd3b26b47fff4b7b431

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZDraG4Zk:c8y93KQjy7G55riF1cMo03M8

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks