00a94866647c4c69d1f319eef2994a61688aafa8fae62a7b121c8a37686f3f98

General

Target
00a94866647c4c69d1f319eef2994a61688aafa8fae62a7b121c8a37686f3f98
Size 1.2MB
Sample260710-jcyv4afv2p
SHA256 00a94866647c4c69d1f319eef2994a61688aafa8fae62a7b121c8a37686f3f98
MD5 5d51eb0a13fc564c5823741c1d43cd36
SHA1 5570e541102c1856e6c9418b816bcd1c7fec13ac
SHA512 6f7aaddc9d8c0d5e6d60590ed79de8144579a7aec7bf200d0394f65b304e3b37113966e48232491b64706db215c0b95ef97474e582f2dd2e4011f12d5647478c
SSDEEP 24576:2+x+nfZW2IFJ3fiRUJmBTEGwtXVT7xk8nBxaHOojUoBF:2+yZW2IFJ8yRvk8i
TLSH
T1C3556C23E18284B1D11462F122F70B34ED78CB725D718A83E7D8EE756E62A71C76B14E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  00a94866647c4c69d1f319eef2994a61688aafa8fae62a7b121c8a37686f3f98
- Size 1.2MB
- SHA256 00a94866647c4c69d1f319eef2994a61688aafa8fae62a7b121c8a37686f3f98
- MD5 5d51eb0a13fc564c5823741c1d43cd36
- SHA1 5570e541102c1856e6c9418b816bcd1c7fec13ac
- SHA512 6f7aaddc9d8c0d5e6d60590ed79de8144579a7aec7bf200d0394f65b304e3b37113966e48232491b64706db215c0b95ef97474e582f2dd2e4011f12d5647478c
- SSDEEP 24576:2+x+nfZW2IFJ3fiRUJmBTEGwtXVT7xk8nBxaHOojUoBF:2+yZW2IFJ8yRvk8i
- TLSH
  T1C3556C23E18284B1D11462F122F70B34ED78CB725D718A83E7D8EE756E62A71C76B14E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution upx
- Stops running service(s)
  defense_evasion execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  .rdata
- Size 180KB
- SHA256 5f9fca7bac55fd44a854e8cdf7631e230a4e9d5b1616c426deda9963758fd1d4
- MD5 1e82a901d6ffb661d9ae4dfe6aa49aeb
- SHA1 acc04392b2da237960ce2d0ba68271ce106a6603
- SHA512 ae922f64e1f6fe82de41308b457e8e56b22fc0d1cff2d8cc3bb58c3d691dc844894389aae116acb12f90cfee807c137d944418c29e0de5c82e240ea56866c12e
- SSDEEP 3072:mUzxWPvRTrwNt7y9iOJNx+UWxTUT0BnXXxprYj/DHxKVWe1nk:+P6v76tgUoBrrYj/DRKX
- TLSH
  T106044822B96AC1B3C0969030D6E75395E6A3F8014F224557728C573EFE23264973BBF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4