Overview

overview

10

Static

static

10

3f8acf7a38...1f.dll

windows7-x64

8

3f8acf7a38...1f.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f8acf7a38930c5d6e3edbbc9840504e163606a712afc651ae79980ec5c3861f.exe

  • Size

    76KB

  • Sample

    250124-vrh9qsyndt

  • MD5

    cba66619fe002dc1ecf6e9d888aabca1

  • SHA1

    013a085a8916c8e446782935b5b175fa8fce69cc

  • SHA256

    3f8acf7a38930c5d6e3edbbc9840504e163606a712afc651ae79980ec5c3861f

  • SHA512

    5775cee7c8d80192be9eb9d28efa51795f57304880bea5d166f20dec4e9f128eebbc390c892327e55b3249f9e8c5fddf4be7ebe4c4f1ad7aa7dc9a0de3094517

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZqWqIi4InTlK:c8y93KQjy7G55riF1cMo03AWqIi4InTY

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      3f8acf7a38930c5d6e3edbbc9840504e163606a712afc651ae79980ec5c3861f.exe

    • Size

      76KB

    • MD5

      cba66619fe002dc1ecf6e9d888aabca1

    • SHA1

      013a085a8916c8e446782935b5b175fa8fce69cc

    • SHA256

      3f8acf7a38930c5d6e3edbbc9840504e163606a712afc651ae79980ec5c3861f

    • SHA512

      5775cee7c8d80192be9eb9d28efa51795f57304880bea5d166f20dec4e9f128eebbc390c892327e55b3249f9e8c5fddf4be7ebe4c4f1ad7aa7dc9a0de3094517

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZqWqIi4InTlK:c8y93KQjy7G55riF1cMo03AWqIi4InTY

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks