Overview

overview

10

Static

static

10

7e9a952d21...4N.dll

windows7-x64

5

7e9a952d21...4N.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7e9a952d21e7701ace93f87f9531b953d69042a8c0f02b94ed940cf3f7f52654N.exe

  • Size

    76KB

  • Sample

    250127-dvl2csyqcm

  • MD5

    aaa8a94aae17d3aa801ddde0b0e30a10

  • SHA1

    e7d7a6de9ad0bfc31b78cca5d880dc34beb898a8

  • SHA256

    7e9a952d21e7701ace93f87f9531b953d69042a8c0f02b94ed940cf3f7f52654

  • SHA512

    97cd4ef10dae90a23af289e2a0adb8c05fed93b7ae6a2f7bd11aee889dc583343dd90e019f0b39d80ed8781a8da0b7db6260f732410ca6ec30518746b40f9270

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZcVy/B:c8y93KQjy7G55riF1cMo036VyJ

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      7e9a952d21e7701ace93f87f9531b953d69042a8c0f02b94ed940cf3f7f52654N.exe

    • Size

      76KB

    • MD5

      aaa8a94aae17d3aa801ddde0b0e30a10

    • SHA1

      e7d7a6de9ad0bfc31b78cca5d880dc34beb898a8

    • SHA256

      7e9a952d21e7701ace93f87f9531b953d69042a8c0f02b94ed940cf3f7f52654

    • SHA512

      97cd4ef10dae90a23af289e2a0adb8c05fed93b7ae6a2f7bd11aee889dc583343dd90e019f0b39d80ed8781a8da0b7db6260f732410ca6ec30518746b40f9270

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZcVy/B:c8y93KQjy7G55riF1cMo036VyJ

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks