DragonBurn[.]exe | Triage™

General

Target
DragonBurn.exe
Size 1.2MB
Sample260809-pabknsac77
SHA256 092a6c3df65f4c55132bbc6f0914a10a68eb793e77995f307f9295eab1251162
MD5 2bf1aaa7e2ccb6b2f7c6cc5d7200a95e
SHA1 61e8e5dd4b0431cebe024b040dfd1a86f898f791
SHA512 7856649c59d77e9a25f6bada8ae377d1c14905d164868c2d8a4f21f580129026ab600ef9bce9b92681122c8206f658cfe5b8eb16c2d9def44a7cd74aa8cd020b
SSDEEP 24576:Qor0uON3thfqrrPC1CgLOFtn/a3LqxkXdcskZ27asTohZxB2:QO0zVy/T/3CkZ2HsZ72
TLSH
T1EF45230CC46C5A7DE024423DC6AF6116B195FE323D806B95F0FCA9A797328D63385BE6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
DragonBurn.exe
unpack001/out.upx

File Explorer

DragonBurn.exe

.exe 1.2MB
out.upx

.exe 139KB

DragonBurn.exe

SHA256 092a6c3df65f4c55132bbc6f0914a10a68eb793e77995f307f9295eab1251162
MD5 2bf1aaa7e2ccb6b2f7c6cc5d7200a95e
SHA1 61e8e5dd4b0431cebe024b040dfd1a86f898f791
SHA512 7856649c59d77e9a25f6bada8ae377d1c14905d164868c2d8a4f21f580129026ab600ef9bce9b92681122c8206f658cfe5b8eb16c2d9def44a7cd74aa8cd020b
SSDEEP 24576:Qor0uON3thfqrrPC1CgLOFtn/a3LqxkXdcskZ27asTohZxB2:QO0zVy/T/3CkZ2HsZ72
TLSH
T1EF45230CC46C5A7DE024423DC6AF6116B195FE323D806B95F0FCA9A797328D63385BE6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Password

1488_______

Minor OS version

0

Major OS version

4

Entry point

175328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 9afb1e3b82523b3619c22685c9d5421b1cffa1f4fd259092ad2b50c5382d8ef5
MD5 b270b31eae4dc044298d83abd08f2513
SHA1 335ff9960a26bb0a5779f048b75f230a768e1f7f
SHA512 91ebd5169544479d04d3ed1722aef26d31d38253dee18086ebc33ec24bf840052d9c6e82934a5e33bafbb6b2224ffce4b543d5d9d5f9632a3f1d069eb27635eb
SSDEEP 3072:CBBT19PQplqQA/lf+o7/b8pzFZ7GwCuRw1usPfnJalXsWTfHWnRl0Y:CLTHQOrRezFWuRwIunJ+FH0N
TLSH
T1F1D3BF0377D2C5F8E1E2167049853BA629FAF7340F258AC79B840D069AB57D4EB3D386
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

103471

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

DragonBurn.exe

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

DragonBurn.exe

generic

out.upx

generic