Overview

overview

10

Static

static

10

ab748dbd20...9b.dll

windows7-x64

8

ab748dbd20...9b.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab748dbd2041e7c94c669fcb5f9165ca193448b23a99916ca17163bd99c5a39b

  • Size

    76KB

  • Sample

    250111-fb2ntaxkfl

  • MD5

    41a0227e48fe3cdf3ad991f383af50d3

  • SHA1

    2ecf1c645b84460a469d44ac1a545a9092a16772

  • SHA256

    ab748dbd2041e7c94c669fcb5f9165ca193448b23a99916ca17163bd99c5a39b

  • SHA512

    3a23be8321319c75e9fe2b64174ee460ea444689db2bfc3550a4c972b3fb60f2ece7ef4e6ad294f9d216bb447b16f72f70bd914294cd5772478a6a51f978ec79

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZSpFnuC:c8y93KQjy7G55riF1cMo03IpFnuC

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      ab748dbd2041e7c94c669fcb5f9165ca193448b23a99916ca17163bd99c5a39b

    • Size

      76KB

    • MD5

      41a0227e48fe3cdf3ad991f383af50d3

    • SHA1

      2ecf1c645b84460a469d44ac1a545a9092a16772

    • SHA256

      ab748dbd2041e7c94c669fcb5f9165ca193448b23a99916ca17163bd99c5a39b

    • SHA512

      3a23be8321319c75e9fe2b64174ee460ea444689db2bfc3550a4c972b3fb60f2ece7ef4e6ad294f9d216bb447b16f72f70bd914294cd5772478a6a51f978ec79

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZSpFnuC:c8y93KQjy7G55riF1cMo03IpFnuC

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks