Overview

overview

8

Static

static

8

ae1f419bb8...le.exe

windows7_x64

8

ae1f419bb8...le.exe

windows10_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae1f419bb8e91810ef9a98c3b5dfdf876b25a9ece8799df4fa75c23fcd3475c3.sample

  • Size

    57KB

  • Sample

    210726-d72c8betta

  • MD5

    1cccdbec21fd05b4500cc78319dffe74

  • SHA1

    af272e1d49b05937a1bd393f8e1b484415af0ab6

  • SHA256

    ae1f419bb8e91810ef9a98c3b5dfdf876b25a9ece8799df4fa75c23fcd3475c3

  • SHA512

    f404c83a44bf47f028eb7a4abf8e0cd79fad3d4e8f5b353353e0bbc2027f7923eb425d66c51e67d78cf27dbac2a77f44abfa640abece95080bd30b50fbfb7bef

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      ae1f419bb8e91810ef9a98c3b5dfdf876b25a9ece8799df4fa75c23fcd3475c3.sample

    • Size

      57KB

    • MD5

      1cccdbec21fd05b4500cc78319dffe74

    • SHA1

      af272e1d49b05937a1bd393f8e1b484415af0ab6

    • SHA256

      ae1f419bb8e91810ef9a98c3b5dfdf876b25a9ece8799df4fa75c23fcd3475c3

    • SHA512

      f404c83a44bf47f028eb7a4abf8e0cd79fad3d4e8f5b353353e0bbc2027f7923eb425d66c51e67d78cf27dbac2a77f44abfa640abece95080bd30b50fbfb7bef

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks