Overview

overview

10

Static

static

5

CleanThis.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    CleanThis.exe
  • Size 618KB
  • Sample260815-encd1sen4y
  • SHA256 cf6eb8377789e316629c0396a2dbb53c69b5fd67bbd0e7163b8d305aaa756e90
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target
      CleanThis.exe
    • Size 618KB
    • SHA256 cf6eb8377789e316629c0396a2dbb53c69b5fd67bbd0e7163b8d305aaa756e90
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks