Overview

overview

7

Static

static

7

rufus-4.5.exe

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rufus-4.5.exe

  • Size

    1.4MB

  • Sample

    240701-ezvpqszanq

  • MD5

    129e5bbf63d8299d027186eafe92754a

  • SHA1

    c50bd94af6af186edc536ec6ff83bdd233586618

  • SHA256

    c6e6cdba209f899e5087f1a1a4babc759414b4a687b60ba4bce62b6b37e8e82b

  • SHA512

    a87a4b44ec3ce37a0da546a805f688bd3a68b52d662a294b8193717f383938f99fa68e50dddf9f012aad7b51e98fd017f6b757ca15332d79a2bb6b882c379a05

  • SSDEEP

    24576:K9+dyknYGIOeicfIgMFbnMt0t6Hmx5N2MJJMex8R00nea7jNqeveiWRKreZMIlEE:K9+dpYGD6HeMet6HmjZMD6KeChVW5ZDB

Score
7/10
evasiontrojanupx

Malware Config

Targets

    • Target

      rufus-4.5.exe

    • Size

      1.4MB

    • MD5

      129e5bbf63d8299d027186eafe92754a

    • SHA1

      c50bd94af6af186edc536ec6ff83bdd233586618

    • SHA256

      c6e6cdba209f899e5087f1a1a4babc759414b4a687b60ba4bce62b6b37e8e82b

    • SHA512

      a87a4b44ec3ce37a0da546a805f688bd3a68b52d662a294b8193717f383938f99fa68e50dddf9f012aad7b51e98fd017f6b757ca15332d79a2bb6b882c379a05

    • SSDEEP

      24576:K9+dyknYGIOeicfIgMFbnMt0t6Hmx5N2MJJMex8R00nea7jNqeveiWRKreZMIlEE:K9+dpYGD6HeMet6HmjZMD6KeChVW5ZDB

    Score
    7/10
    evasiontrojanupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks