Overview

overview

10

Static

static

10

4aa884174e...1N.dll

windows7-x64

8

4aa884174e...1N.dll

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4aa884174ed83696f1f1efd43d8d370a673451c7692cc67c4a925c541e5471c1N.exe

  • Size

    76KB

  • Sample

    250124-qmmzxazpcw

  • MD5

    eb6dad41596e53e80206faf9b79c4f10

  • SHA1

    14385a6376e264245e9a762647cea1b205f12bdf

  • SHA256

    4aa884174ed83696f1f1efd43d8d370a673451c7692cc67c4a925c541e5471c1

  • SHA512

    82334d1fb8e2caf962f8c9eadc0f6474102d6b03527b5456ec85d89aa304fc351de33f7a8946acdf1c63e18208188c9db996a2125700164e93c3ce6f653b77b7

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZwH++HH:c8y93KQjy7G55riF1cMo03o+eH

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      4aa884174ed83696f1f1efd43d8d370a673451c7692cc67c4a925c541e5471c1N.exe

    • Size

      76KB

    • MD5

      eb6dad41596e53e80206faf9b79c4f10

    • SHA1

      14385a6376e264245e9a762647cea1b205f12bdf

    • SHA256

      4aa884174ed83696f1f1efd43d8d370a673451c7692cc67c4a925c541e5471c1

    • SHA512

      82334d1fb8e2caf962f8c9eadc0f6474102d6b03527b5456ec85d89aa304fc351de33f7a8946acdf1c63e18208188c9db996a2125700164e93c3ce6f653b77b7

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZwH++HH:c8y93KQjy7G55riF1cMo03o+eH

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks