Overview

overview

10

Static

static

10

c974533695...eN.dll

windows7-x64

5

c974533695...eN.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9745336957c7f1788a5d9951ff1ec21708b45b8a5d2bc7d3669f8295f654d0eN.exe

  • Size

    76KB

  • Sample

    250202-lva8vswnct

  • MD5

    11f0bcb5dd792392aea148c583308550

  • SHA1

    06d004a1fe9e684a560a1bf3f7b8dd10e02ee7cd

  • SHA256

    c9745336957c7f1788a5d9951ff1ec21708b45b8a5d2bc7d3669f8295f654d0e

  • SHA512

    ff6ecc6aa8bbeb265b024bb7f168e880385d62025112a54527837abf2a48f987c81c5824a0bc8aab9207b3b392774e0b2de1163490c2f053e2659f11cc64df05

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z44He:c8y93KQjy7G55riF1cMo03qz

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      c9745336957c7f1788a5d9951ff1ec21708b45b8a5d2bc7d3669f8295f654d0eN.exe

    • Size

      76KB

    • MD5

      11f0bcb5dd792392aea148c583308550

    • SHA1

      06d004a1fe9e684a560a1bf3f7b8dd10e02ee7cd

    • SHA256

      c9745336957c7f1788a5d9951ff1ec21708b45b8a5d2bc7d3669f8295f654d0e

    • SHA512

      ff6ecc6aa8bbeb265b024bb7f168e880385d62025112a54527837abf2a48f987c81c5824a0bc8aab9207b3b392774e0b2de1163490c2f053e2659f11cc64df05

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z44He:c8y93KQjy7G55riF1cMo03qz

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks