Overview

overview

10

Static

static

10

7bc8899c00...24.dll

windows7-x64

5

7bc8899c00...24.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7bc8899c00850ccf2e7b9c70ab2c1174e0918723ae3f40b48e2710ef807b2724

  • Size

    76KB

  • Sample

    250121-ftdppsxqcj

  • MD5

    28fb7d3955d3598195eef83c0d62e30c

  • SHA1

    d48ef5ec001a7b359d8095defd77a8de97b348ae

  • SHA256

    7bc8899c00850ccf2e7b9c70ab2c1174e0918723ae3f40b48e2710ef807b2724

  • SHA512

    270a3af5b3f5388f623d155174b6dd8800475bf5e0a4827bc0a51b0e0e4f91791b6aa57d77710c36d177a227fcd583cd102502fee0cb8b03a71fcff2bf8810cf

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z8bvwVds:c8y93KQjy7G55riF1cMo03CbmS

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      7bc8899c00850ccf2e7b9c70ab2c1174e0918723ae3f40b48e2710ef807b2724

    • Size

      76KB

    • MD5

      28fb7d3955d3598195eef83c0d62e30c

    • SHA1

      d48ef5ec001a7b359d8095defd77a8de97b348ae

    • SHA256

      7bc8899c00850ccf2e7b9c70ab2c1174e0918723ae3f40b48e2710ef807b2724

    • SHA512

      270a3af5b3f5388f623d155174b6dd8800475bf5e0a4827bc0a51b0e0e4f91791b6aa57d77710c36d177a227fcd583cd102502fee0cb8b03a71fcff2bf8810cf

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z8bvwVds:c8y93KQjy7G55riF1cMo03CbmS

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks