Overview

overview

10

Static

static

10

39411e7d80...b6.dll

windows7-x64

5

39411e7d80...b6.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39411e7d803dffb5a2fc857726502a559e69646de2cac6d14514d32d52718db6

  • Size

    76KB

  • Sample

    250303-12m9bs1l12

  • MD5

    33ec67e2a7ba6ecff8baa8205681d205

  • SHA1

    dc25262fe1af46615ffc915aa8b9dd86ff1b9b71

  • SHA256

    39411e7d803dffb5a2fc857726502a559e69646de2cac6d14514d32d52718db6

  • SHA512

    f8eece3e14d002369568e429ebeb84600b0d067622691e0c7bcb1580aa815e877e30967b6103e9ffc68b3c9e5b6dcbcec53eaa254958e4c6c791ee03f1f97de5

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZEE6Bi:c8y93KQjy7G55riF1cMo03yE6o

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      39411e7d803dffb5a2fc857726502a559e69646de2cac6d14514d32d52718db6

    • Size

      76KB

    • MD5

      33ec67e2a7ba6ecff8baa8205681d205

    • SHA1

      dc25262fe1af46615ffc915aa8b9dd86ff1b9b71

    • SHA256

      39411e7d803dffb5a2fc857726502a559e69646de2cac6d14514d32d52718db6

    • SHA512

      f8eece3e14d002369568e429ebeb84600b0d067622691e0c7bcb1580aa815e877e30967b6103e9ffc68b3c9e5b6dcbcec53eaa254958e4c6c791ee03f1f97de5

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZEE6Bi:c8y93KQjy7G55riF1cMo03yE6o

    Score
    8/10
    discoveryupxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks