Overview

overview

10

Static

static

10

e464501f4b...91.dll

windows7-x64

5

e464501f4b...91.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e464501f4ba37549cdb42e02c28526872ce255a50d1b6f471dd99c2c5a9df591

  • Size

    76KB

  • Sample

    250109-l1z46synhl

  • MD5

    774751c8d406535826333ab81cb23178

  • SHA1

    b74a3086d68d3e51ef5d470ca35e2e7954fc5f54

  • SHA256

    e464501f4ba37549cdb42e02c28526872ce255a50d1b6f471dd99c2c5a9df591

  • SHA512

    5c5e542a77d886cf7a60d363671622fb0530abe08aea2726d65e734e4cbfbd1452d99873a2f1de13cb29f62c9a522abc4bdcc57d0a75c57df9877a0b2f7025a9

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZG41j/DB:c8y93KQjy7G55riF1cMo0384l/DB

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      e464501f4ba37549cdb42e02c28526872ce255a50d1b6f471dd99c2c5a9df591

    • Size

      76KB

    • MD5

      774751c8d406535826333ab81cb23178

    • SHA1

      b74a3086d68d3e51ef5d470ca35e2e7954fc5f54

    • SHA256

      e464501f4ba37549cdb42e02c28526872ce255a50d1b6f471dd99c2c5a9df591

    • SHA512

      5c5e542a77d886cf7a60d363671622fb0530abe08aea2726d65e734e4cbfbd1452d99873a2f1de13cb29f62c9a522abc4bdcc57d0a75c57df9877a0b2f7025a9

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZG41j/DB:c8y93KQjy7G55riF1cMo0384l/DB

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks