Overview

overview

10

Static

static

10

e46f9a6d9e...de.dll

windows7-x64

5

e46f9a6d9e...de.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e46f9a6d9e9cb88ef27f8240a5587723437d22a7e703a4ba6954c138a59a39de

  • Size

    76KB

  • Sample

    250126-gnjt7stpav

  • MD5

    59a71cad1ec6635f05f61a1b045bf1f8

  • SHA1

    1d536137e356e5b23b1e1074e9ae26ce309e6c87

  • SHA256

    e46f9a6d9e9cb88ef27f8240a5587723437d22a7e703a4ba6954c138a59a39de

  • SHA512

    66644d7c4c4b68fff173a8889c10b1691ddf203c1336c253bdf7a707b1c6922786463305add049bedf17d458d7dbfb3434da2a813875bbc22a83a1820f9d6b46

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZGX+5V:c8y93KQjy7G55riF1cMo03m+f

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      e46f9a6d9e9cb88ef27f8240a5587723437d22a7e703a4ba6954c138a59a39de

    • Size

      76KB

    • MD5

      59a71cad1ec6635f05f61a1b045bf1f8

    • SHA1

      1d536137e356e5b23b1e1074e9ae26ce309e6c87

    • SHA256

      e46f9a6d9e9cb88ef27f8240a5587723437d22a7e703a4ba6954c138a59a39de

    • SHA512

      66644d7c4c4b68fff173a8889c10b1691ddf203c1336c253bdf7a707b1c6922786463305add049bedf17d458d7dbfb3434da2a813875bbc22a83a1820f9d6b46

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZGX+5V:c8y93KQjy7G55riF1cMo03m+f

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks