Overview

overview

10

Static

static

10

61a5590ef0...b7.dll

windows7-x64

8

61a5590ef0...b7.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61a5590ef05cab127ab82e90fd1e52ad1a828cb9252fa02c881516c9565f55b7

  • Size

    76KB

  • Sample

    250121-dnt4dstjgl

  • MD5

    5b0dbec0cb667e5a8fc5d7fda0fa88e9

  • SHA1

    d34069bdd08ac91eb58972ca10b6c0716c609a08

  • SHA256

    61a5590ef05cab127ab82e90fd1e52ad1a828cb9252fa02c881516c9565f55b7

  • SHA512

    4d2f88b4ee2e72ad815e89f3439b02169484fbd43ee2ecbac65b1ffd4487d79808dfebe897688a955ea8ac2dd44fadc833dcdcf8a9031e9bae6647cb2fa74fb1

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z7rPz:c8y93KQjy7G55riF1cMo039P

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      61a5590ef05cab127ab82e90fd1e52ad1a828cb9252fa02c881516c9565f55b7

    • Size

      76KB

    • MD5

      5b0dbec0cb667e5a8fc5d7fda0fa88e9

    • SHA1

      d34069bdd08ac91eb58972ca10b6c0716c609a08

    • SHA256

      61a5590ef05cab127ab82e90fd1e52ad1a828cb9252fa02c881516c9565f55b7

    • SHA512

      4d2f88b4ee2e72ad815e89f3439b02169484fbd43ee2ecbac65b1ffd4487d79808dfebe897688a955ea8ac2dd44fadc833dcdcf8a9031e9bae6647cb2fa74fb1

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z7rPz:c8y93KQjy7G55riF1cMo039P

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks