Overview

overview

10

Static

static

10

0ad6fdb6d7...5N.dll

windows7-x64

5

0ad6fdb6d7...5N.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ad6fdb6d79e4d60d8a7fed1a8ff2e889893f94ba87baf247ed8f516b34d6465N.exe

  • Size

    76KB

  • Sample

    250121-czbwhs1rgt

  • MD5

    adbdb7fff68bd975bd0f268e25c4c9e0

  • SHA1

    21c66311467d65775e746724d17ce4f905672a9a

  • SHA256

    0ad6fdb6d79e4d60d8a7fed1a8ff2e889893f94ba87baf247ed8f516b34d6465

  • SHA512

    ee975ddac6e5782e9dcae419b8e1258acade6ac0ccb1e5ee2cec1bbe4922b94c82c3833624efb8715e1acbfe80828c64efb59083eef2369dcfd348bb6a6b442d

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZMa38:c8y93KQjy7G55riF1cMo03ya38

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      0ad6fdb6d79e4d60d8a7fed1a8ff2e889893f94ba87baf247ed8f516b34d6465N.exe

    • Size

      76KB

    • MD5

      adbdb7fff68bd975bd0f268e25c4c9e0

    • SHA1

      21c66311467d65775e746724d17ce4f905672a9a

    • SHA256

      0ad6fdb6d79e4d60d8a7fed1a8ff2e889893f94ba87baf247ed8f516b34d6465

    • SHA512

      ee975ddac6e5782e9dcae419b8e1258acade6ac0ccb1e5ee2cec1bbe4922b94c82c3833624efb8715e1acbfe80828c64efb59083eef2369dcfd348bb6a6b442d

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZMa38:c8y93KQjy7G55riF1cMo03ya38

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks