Description
Detects executables packed with UPX/modified UPX open source packer.
TaskMachineNet.exe
General
Target
Size
Sample
TaskMachineNet.exe
4MB
201120-pqn9z5efwx
Score
8 /10
MD5
SHA1
SHA256
SHA512
0f20f935559294d2088cfab26843e408
85ac819478d1965c134041dfbd4973c0c2335d09
5784eef61ea7f9ef95d9559eb8b55b5edf0a362413b4fa9e391de62a9ee5c278
bc2a9ae95bfe7e8427dc0961a0d892de8bec64cece3470e7030c4a291d503f189d25e04dd14ca70df00c79ae7356832447c61e1e1a53f248e583b2705f0cbc0a
Malware Config
Targets
Target
MD5
Filesize
TaskMachineNet.exe
0f20f935559294d2088cfab26843e408
4MB
Score
8 /10
SHA1
SHA256
SHA512
85ac819478d1965c134041dfbd4973c0c2335d09
5784eef61ea7f9ef95d9559eb8b55b5edf0a362413b4fa9e391de62a9ee5c278
bc2a9ae95bfe7e8427dc0961a0d892de8bec64cece3470e7030c4a291d503f189d25e04dd14ca70df00c79ae7356832447c61e1e1a53f248e583b2705f0cbc0a
Tags
Signatures
-
Executes dropped EXE
-
UPX packed file
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
Tags
TTPs
-
Checks installed software on the system
Description
Looks up Uninstall key entries in the registry to enumerate software on the system.
Tags
TTPs
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks