Overview

overview

10

Static

static

10

51be9ccd2f...84.dll

windows7-x64

5

51be9ccd2f...84.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51be9ccd2f21381d8201e9050523691eed3785429b61c337e37ec943ac4a5984

  • Size

    76KB

  • Sample

    250109-acac3a1rck

  • MD5

    46c9fe48ce2fda05880cd3d4d271cecb

  • SHA1

    ed527286d75794361d6f7459f2f9668c25ace9e6

  • SHA256

    51be9ccd2f21381d8201e9050523691eed3785429b61c337e37ec943ac4a5984

  • SHA512

    7064f8dfa7faa9eb2797d3f57ba8facac2fc634da7ed0ed981148433ba8f4951ef2e05f7d2c20653ec6a2cfbd1d197a28a5edf1b1ace1ce452bbdaba10ee3e42

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZV7EQE1:c8y93KQjy7G55riF1cMo03X4

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      51be9ccd2f21381d8201e9050523691eed3785429b61c337e37ec943ac4a5984

    • Size

      76KB

    • MD5

      46c9fe48ce2fda05880cd3d4d271cecb

    • SHA1

      ed527286d75794361d6f7459f2f9668c25ace9e6

    • SHA256

      51be9ccd2f21381d8201e9050523691eed3785429b61c337e37ec943ac4a5984

    • SHA512

      7064f8dfa7faa9eb2797d3f57ba8facac2fc634da7ed0ed981148433ba8f4951ef2e05f7d2c20653ec6a2cfbd1d197a28a5edf1b1ace1ce452bbdaba10ee3e42

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZV7EQE1:c8y93KQjy7G55riF1cMo03X4

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks