Overview

overview

10

Static

static

10

3de6ead56a...7d.dll

windows7-x64

5

3de6ead56a...7d.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3de6ead56acb47e6c629c1b542defdbda2cdf73911df67a7f181e135846c9f7d.exe

  • Size

    76KB

  • Sample

    250123-3lhd9azrfn

  • MD5

    56615a2467cf3dbd6173607d43f214c6

  • SHA1

    dfc6da421d63dc07e7d3408e1d467216b20c2aaf

  • SHA256

    3de6ead56acb47e6c629c1b542defdbda2cdf73911df67a7f181e135846c9f7d

  • SHA512

    ce9eab1b57e7c3bfd043b2d653bf830f494d708ff92f20d4290d53369dd5471211248c1ee311ecf12d03a26d64241c1e7cdd9e373447a4e70265e274f90a6050

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z6N3e1:c8y93KQjy7G55riF1cMo03N

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      3de6ead56acb47e6c629c1b542defdbda2cdf73911df67a7f181e135846c9f7d.exe

    • Size

      76KB

    • MD5

      56615a2467cf3dbd6173607d43f214c6

    • SHA1

      dfc6da421d63dc07e7d3408e1d467216b20c2aaf

    • SHA256

      3de6ead56acb47e6c629c1b542defdbda2cdf73911df67a7f181e135846c9f7d

    • SHA512

      ce9eab1b57e7c3bfd043b2d653bf830f494d708ff92f20d4290d53369dd5471211248c1ee311ecf12d03a26d64241c1e7cdd9e373447a4e70265e274f90a6050

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z6N3e1:c8y93KQjy7G55riF1cMo03N

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks