Overview

overview

10

Static

static

10

4347f92685...3c.dll

windows7-x64

8

4347f92685...3c.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4347f9268561c09183b19a4824845618b20355b37e252c27fe11656f10a32d3c.exe

  • Size

    76KB

  • Sample

    250111-cmdjks1mgl

  • MD5

    381b92a7ec6fbd31b8631e01c9ccf501

  • SHA1

    dfde829e60da1c707b9af800bec726660b4a737c

  • SHA256

    4347f9268561c09183b19a4824845618b20355b37e252c27fe11656f10a32d3c

  • SHA512

    18c77cb179ffbde48cc53605a16224e69fa34fd44222f1cc2b96cc64c68ac9439d7f2d45930342e5101d4643bcf001d0c338de464a3579cb760d2871f878af6b

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZtF:c8y93KQjy7G55riF1cMo03d

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      4347f9268561c09183b19a4824845618b20355b37e252c27fe11656f10a32d3c.exe

    • Size

      76KB

    • MD5

      381b92a7ec6fbd31b8631e01c9ccf501

    • SHA1

      dfde829e60da1c707b9af800bec726660b4a737c

    • SHA256

      4347f9268561c09183b19a4824845618b20355b37e252c27fe11656f10a32d3c

    • SHA512

      18c77cb179ffbde48cc53605a16224e69fa34fd44222f1cc2b96cc64c68ac9439d7f2d45930342e5101d4643bcf001d0c338de464a3579cb760d2871f878af6b

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZtF:c8y93KQjy7G55riF1cMo03d

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks