Overview

overview

10

Static

static

6eaf4b2f67...79.exe

windows7_x64

10

6eaf4b2f67...79.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    6eaf4b2f67fa41762b5cfefc2ec67e79.exe
  • Size 3.2MB
  • Sample220315-rda5esaffl
  • SHA256 cdd12576c48c2123efbc19404d37cc9505c80d8378f37e793a4b0ecb02aa2361
  • MD5 SHA1 SHA512
Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target
      6eaf4b2f67fa41762b5cfefc2ec67e79.exe
    • Size 3.2MB
    • SHA256 cdd12576c48c2123efbc19404d37cc9505c80d8378f37e793a4b0ecb02aa2361
    • MD5 SHA1 SHA512
    Score
    10/10
    evasionpersistencetrojanupx

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Downloads MZ/PE file

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks