General

  • Target
    lighttpd-1.4.49-1-win64-ssl-upx.zip
  • Size 9.5MB
  • Sample260925-pmlleaea92
  • SHA256 6283f525e0cbdd0d54e1175509813347a30a22827f4756045eeacc38ea0a2c4a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Targets

    • Target
      lighttpd/NEWS.txt
    • Size 101KB
    • SHA256 a4ef7de9f2575856624b8f8f754e217ff778597110e1072595e22bbb16df4445
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      lighttpd/cygattr-1.dll
    • Size 8KB
    • SHA256 12c46b04b4f799f2d5f0990230247e479c145415d128fb51f14da6a3b350da19
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygbz2-1.dll
    • Size 28KB
    • SHA256 b5897a490464e555b3bfe9a7f0323bd3b09020af9bcc9d1ebf90ee4e92417072
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygcom_err-2.dll
    • Size 6KB
    • SHA256 14be545f459d8625d91600bb102b706959afef51f1d4d7effb886130fe5c38de
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygcrypt-0.dll
    • Size 20KB
    • SHA256 32ddcbc66dc01ad691bc30b1702be0295372869ba6342cf3a6e68a95f90aff22
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygcrypto-1.0.0.dll
    • Size 2.2MB
    • SHA256 9443e1493f82f9f18fa3d710ecbae0a6937b6524cc17ea9c42326dead8dc6d7e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygdbi-1.dll
    • Size 21KB
    • SHA256 16df94ec6fbd417d8f50cf346f9aa0657a5704b23f5b005c851510c81dd05058
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygev-4.dll
    • Size 20KB
    • SHA256 996fe3d0c999cd6c316cd9fa5df33bd6096811bca72ac6908da2b5b628274dcd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygfam-0.dll
    • Size 13KB
    • SHA256 6ba4c83281d5b966e46bb2eb2287748d552ef2685c5506cdab6612cedab0164b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cyggcc_s-seh-1.dll
    • Size 31KB
    • SHA256 83299b13e09ba6ffd0cd1c509e29bc8aa1bfde4cb9f3ed631bb09cf92ab038ad
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cyggdbm-4.dll
    • Size 19KB
    • SHA256 36459c68cb27ce6e415d2b0fa4d0e6c546f668f6a1f565027d627c5039c8fd09
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cyggeoip-1.dll
    • Size 71KB
    • SHA256 0e0bc6beca9055c0efb6cbd1b36ac41dd87ad373e20322d3c3516a67db3ba016
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cyggssapi_krb5-2.dll
    • Size 114KB
    • SHA256 3ca31336b251b7f0eb3f93554f9ce295e3fb1e2b059fda8b4a3a9acd800fabea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygiconv-2.dll
    • Size 698KB
    • SHA256 09ed7266a55320016a353a90b11878bc80902d4228072f7f1015c86e7b091a84
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygintl-8.dll
    • Size 21KB
    • SHA256 38b589bc139230e2802ef9a7b3b5b96e3ee18f06a7cfac37bf3666c70fb7e5d9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygk5crypto-3.dll
    • Size 85KB
    • SHA256 f457d2d798bf81e56875fa0762541ccf0096e3532e97ca9fec8a7390432acfda
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks

static1

upx
Score
5/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

upx
Score
5/10

behavioral4

upx
Score
5/10

behavioral5

upx
Score
5/10

behavioral6

upx
Score
5/10

behavioral7

upx
Score
5/10

behavioral8

upx
Score
5/10

behavioral9

upx
Score
5/10

behavioral10

upx
Score
5/10

behavioral11

upx
Score
5/10

behavioral12

upx
Score
5/10

behavioral13

upx
Score
5/10

behavioral14

upx
Score
5/10

behavioral15

upx
Score
5/10

behavioral16

upx
Score
5/10

behavioral17

upx
Score
5/10

behavioral18

upx
Score
5/10

behavioral19

upx
Score
5/10

behavioral20

upx
Score
5/10

behavioral21

upx
Score
5/10

behavioral22

upx
Score
5/10

behavioral23

upx
Score
5/10

behavioral24

upx
Score
5/10

behavioral25

upx
Score
5/10

behavioral26

upx
Score
5/10

behavioral27

upx
Score
5/10

behavioral28

upx
Score
5/10

behavioral29

upx
Score
5/10

behavioral30

upx
Score
5/10

behavioral31

upx
Score
5/10

behavioral32

upx
Score
5/10