Overview

overview

10

Static

static

3

fd59a08037...80.exe

windows10-2004-x64

fd59a08037...80.exe

windows11-21h2-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd59a08037ec33788d8925ab2f272af39c4f2c0cb7bbd9960ab51fc8f3ade980

  • Size

    4.3MB

  • Sample

    250420-zd1zvatsc1

  • MD5

    fdfb91eb11a2ce0f0ab3cd5afd063ab8

  • SHA1

    bbde70e7ffe152db9b30eced983914f809aa039e

  • SHA256

    fd59a08037ec33788d8925ab2f272af39c4f2c0cb7bbd9960ab51fc8f3ade980

  • SHA512

    6843d0aac2e128181abaa1609ee44d0150c9fede49483b7104e8149271ca7c6d8b62b2fb0146d07210f1c68df862aa9438f1dc7490de421e85973a8c4f0d5a45

  • SSDEEP

    49152:HR6OVgFh11rmo6mxQXiDGTMD1TRLjXpWMiI/57aa1u+ENFAoWo2Dqbf:xBgFhf7BxQXGB3XpWHIh1U+EKo2Dqb

Score
10/10
purplefoxdiscoverypersistencerootkittrojanupx

Malware Config

Targets

    • Target

      fd59a08037ec33788d8925ab2f272af39c4f2c0cb7bbd9960ab51fc8f3ade980

    • Size

      4.3MB

    • MD5

      fdfb91eb11a2ce0f0ab3cd5afd063ab8

    • SHA1

      bbde70e7ffe152db9b30eced983914f809aa039e

    • SHA256

      fd59a08037ec33788d8925ab2f272af39c4f2c0cb7bbd9960ab51fc8f3ade980

    • SHA512

      6843d0aac2e128181abaa1609ee44d0150c9fede49483b7104e8149271ca7c6d8b62b2fb0146d07210f1c68df862aa9438f1dc7490de421e85973a8c4f0d5a45

    • SSDEEP

      49152:HR6OVgFh11rmo6mxQXiDGTMD1TRLjXpWMiI/57aa1u+ENFAoWo2Dqbf:xBgFhf7BxQXGB3XpWHIh1U+EKo2Dqb

    Score
    10/10
    purplefoxdiscoverypersistencerootkittrojanupx

    • Detect PurpleFox Rootkit

      Detect PurpleFox Rootkit.

      rootkit

    • PurpleFox

      PurpleFox is an exploit kit used to distribute other malware families and first seen in 2018.

      rootkittrojanpurplefox

    • Purplefox family

      purplefox

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks