General

  • Target
    lighttpd-1.4.49-1-win32-ssl-upx.zip
  • Size 9.1MB
  • Sample260925-pmlleaea93
  • SHA256 644489dfdd7ac26fd8195454df33aa2c5e72ed2392ad9beb6b236ab1f2342176
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      lighttpd/NEWS.txt
    • Size 101KB
    • SHA256 a4ef7de9f2575856624b8f8f754e217ff778597110e1072595e22bbb16df4445
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      lighttpd/cygattr-1.dll
    • Size 6KB
    • SHA256 b60a6f99cda83197785c35ae59952de9a0f067ee5059d4b2694de801285cee12
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygbz2-1.dll
    • Size 28KB
    • SHA256 efcb152576f53702e4d34e8932dc4c0320a98ac4df674e79f7de936b9c513cda
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygcom_err-2.dll
    • Size 6KB
    • SHA256 9f70d01f2f69107e8f575b5749340cb4e93dc882c6f17bbe7e6cf54a8ce28596
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygcrypt-0.dll
    • Size 21KB
    • SHA256 0228a4b71ed58efd669ccdda990b2ed01ca1d3129e622b04c5ab8813b16e3c3b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygcrypto-1.0.0.dll
    • Size 792KB
    • SHA256 74dabcd9c970410bb0810e2bf5b3355f63fe314e5a54553a5b18209d415db053
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygdbi-1.dll
    • Size 22KB
    • SHA256 3962e7fb0bf2ccb29371efa10537bb2a73f5ac3eda86050179cd7773d5e0f125
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygev-4.dll
    • Size 20KB
    • SHA256 baaecb7c18164958d5152ba56fcd37dd7702f9537230b706f87ab50df31bd219
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygfam-0.dll
    • Size 13KB
    • SHA256 14cca5b0e95a5d2cbd59ad641f735bb8205434442b7f4be2c01caaa06121914c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cyggcc_s-1.dll
    • Size 45KB
    • SHA256 42eddc79779c28b9374085d3689219f8b729cd5b677ee6e971cdd27d49fba686
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cyggdbm-4.dll
    • Size 20KB
    • SHA256 6c0b6ef8387fd3caeafa20e6a9431ee89fe0219f691ba366ec2fc329fafcb3f2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cyggeoip-1.dll
    • Size 65KB
    • SHA256 e2314b03ab9acb9036020e3061341e9566351579c17e0ee84fed087ff31b56b2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cyggssapi_krb5-2.dll
    • Size 116KB
    • SHA256 e4b2602bf2dfd5d688892cc7b052f1d4e97946d21c45a94714f7680d6104ccf9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygiconv-2.dll
    • Size 699KB
    • SHA256 29784dd306f141e4cc0fa20fac612b6547d47be8b1947b984456df1f5ca66357
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygintl-8.dll
    • Size 20KB
    • SHA256 d4851840a1f903652b7d1730c1aff263ec2e36395c4e697575ad4be3ed39280a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      lighttpd/cygk5crypto-3.dll
    • Size 85KB
    • SHA256 1e32215ddf8f038bb9164d043c75546dbdd285ff01e928b48f7da16bcf3ed084
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks

static1

upx
Score
7/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

discoveryupx
Score
5/10

behavioral4

discoveryupx
Score
5/10

behavioral5

discoveryupx
Score
5/10

behavioral6

discoveryupx
Score
5/10

behavioral7

discoveryupx
Score
5/10

behavioral8

discoveryupx
Score
5/10

behavioral9

discoveryupx
Score
5/10

behavioral10

discoveryupx
Score
5/10

behavioral11

discoveryupx
Score
5/10

behavioral12

discoveryupx
Score
5/10

behavioral13

discoveryupx
Score
5/10

behavioral14

discoveryupx
Score
5/10

behavioral15

discoveryupx
Score
5/10

behavioral16

discoveryupx
Score
5/10

behavioral17

discoveryupx
Score
5/10

behavioral18

discoveryupx
Score
5/10

behavioral19

discoveryupx
Score
5/10

behavioral20

discoveryupx
Score
5/10

behavioral21

discoveryupx
Score
5/10

behavioral22

discoveryupx
Score
5/10

behavioral23

discoveryupx
Score
5/10

behavioral24

discoveryupx
Score
5/10

behavioral25

discoveryupx
Score
5/10

behavioral26

discoveryupx
Score
5/10

behavioral27

discoveryupx
Score
5/10

behavioral28

discoveryupx
Score
5/10

behavioral29

discoveryupx
Score
5/10

behavioral30

discoveryupx
Score
5/10

behavioral31

discoveryupx
Score
5/10

behavioral32

discoveryupx
Score
5/10