e752674d5d04a26667654b920284679bb89fdf3057c3ff739c1ea4b295d509c8

General

Target
e752674d5d04a26667654b920284679bb89fdf3057c3ff739c1ea4b295d509c8.exe
Size 1.2MB
Sample260710-jdkpvsgv8t
SHA256 e752674d5d04a26667654b920284679bb89fdf3057c3ff739c1ea4b295d509c8
MD5 596b0215daf6bbb2df1ae276359c7550
SHA1 c0b47c268c47348a0f46a7dbef26ae8a6d31fe66
SHA512 95b9da1a83082dd95e44a788fbd10c60aae99c5d6c71a880aa8be46bca175d33e875ac4d130e9a147a15fdc654a9dcc05b54062bfa18aff124cfb5deccd00559
SSDEEP 24576:6+x+nfZW2IFJ3fiRUJmBTEGwtXVT7xk8nBxaHOojUoBF:6+yZW2IFJ8yRvk8i
TLSH
T105556C23E18284B1D11462F122F70B34ED78CB725D718A83E7D8EE756E62A71C76B14E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  e752674d5d04a26667654b920284679bb89fdf3057c3ff739c1ea4b295d509c8.exe
- Size 1.2MB
- SHA256 e752674d5d04a26667654b920284679bb89fdf3057c3ff739c1ea4b295d509c8
- MD5 596b0215daf6bbb2df1ae276359c7550
- SHA1 c0b47c268c47348a0f46a7dbef26ae8a6d31fe66
- SHA512 95b9da1a83082dd95e44a788fbd10c60aae99c5d6c71a880aa8be46bca175d33e875ac4d130e9a147a15fdc654a9dcc05b54062bfa18aff124cfb5deccd00559
- SSDEEP 24576:6+x+nfZW2IFJ3fiRUJmBTEGwtXVT7xk8nBxaHOojUoBF:6+yZW2IFJ8yRvk8i
- TLSH
  T105556C23E18284B1D11462F122F70B34ED78CB725D718A83E7D8EE756E62A71C76B14E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution upx persistence privilege_escalation
- Adds policy Run key to start application
  persistence
- Modifies Windows Firewall
  defense_evasion
- Creates new service(s)
  persistence execution
- Executes dropped EXE
- Stops running service(s)
  defense_evasion execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  .rdata
- Size 180KB
- SHA256 5f9fca7bac55fd44a854e8cdf7631e230a4e9d5b1616c426deda9963758fd1d4
- MD5 1e82a901d6ffb661d9ae4dfe6aa49aeb
- SHA1 acc04392b2da237960ce2d0ba68271ce106a6603
- SHA512 ae922f64e1f6fe82de41308b457e8e56b22fc0d1cff2d8cc3bb58c3d691dc844894389aae116acb12f90cfee807c137d944418c29e0de5c82e240ea56866c12e
- SSDEEP 3072:mUzxWPvRTrwNt7y9iOJNx+UWxTUT0BnXXxprYj/DHxKVWe1nk:+P6v76tgUoBrrYj/DRKX
- TLSH
  T106044822B96AC1B3C0969030D6E75395E6A3F8014F224557728C573EFE23264973BBF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4