Overview

overview

10

Static

static

10

0b759deea6...f8.dll

windows7-x64

5

0b759deea6...f8.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b759deea605c01dfc15f963321f9b30392186bfee91b5e7f0e75fdf540113f8

  • Size

    76KB

  • Sample

    250108-yc7kkazqcw

  • MD5

    aaf311a315cb372fb738858fbaed59bc

  • SHA1

    d02969a0ea38461ee3821965c86b828ef78c5a68

  • SHA256

    0b759deea605c01dfc15f963321f9b30392186bfee91b5e7f0e75fdf540113f8

  • SHA512

    b0886f0297debbca22444ac9a5d7784d4a48085b666056e0a6768545db8fde4bb6ff8edee698a548146680635f04017624074be07dacca8b5b8c61c7d490fd7f

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZJZ:c8y93KQjy7G55riF1cMo03bZ

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      0b759deea605c01dfc15f963321f9b30392186bfee91b5e7f0e75fdf540113f8

    • Size

      76KB

    • MD5

      aaf311a315cb372fb738858fbaed59bc

    • SHA1

      d02969a0ea38461ee3821965c86b828ef78c5a68

    • SHA256

      0b759deea605c01dfc15f963321f9b30392186bfee91b5e7f0e75fdf540113f8

    • SHA512

      b0886f0297debbca22444ac9a5d7784d4a48085b666056e0a6768545db8fde4bb6ff8edee698a548146680635f04017624074be07dacca8b5b8c61c7d490fd7f

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZJZ:c8y93KQjy7G55riF1cMo03bZ

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks