3a0a1e093ef1cdedeaa66dfed414330effd9dad5967a34d7dbdf2e22211e9d75 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a0a1e093ef1cdedeaa66dfed414330effd9dad5967a34d7dbdf2e22211e9d75
Size

269KB
Sample

220919-z4pdqsddam
MD5

0f8be03895ee6a1fb47015061775f6f5
SHA1

812eadf3612926e18baa37b36edaea9abbbc7e71
SHA256

3a0a1e093ef1cdedeaa66dfed414330effd9dad5967a34d7dbdf2e22211e9d75
SHA512

ef66c37943080feef8db5e9858b58228a71f7e8d074090e9a76bd0605bb8ee04842d05f999c80e4e6dd25ef0791e02b163bb6a71f0df7798382352294f203f19
SSDEEP

6144:lvIj8N0oK0zat8GzwzkIX8NLoK0zat8GzwzkIXOgaNS:lQjeK0qjISsK0qjIBP

Score

10^/10

persistence upx

Malware Config

Targets

- Target
  
  3a0a1e093ef1cdedeaa66dfed414330effd9dad5967a34d7dbdf2e22211e9d75
- Size
  
  269KB
- MD5
  
  0f8be03895ee6a1fb47015061775f6f5
- SHA1
  
  812eadf3612926e18baa37b36edaea9abbbc7e71
- SHA256
  
  3a0a1e093ef1cdedeaa66dfed414330effd9dad5967a34d7dbdf2e22211e9d75
- SHA512
  
  ef66c37943080feef8db5e9858b58228a71f7e8d074090e9a76bd0605bb8ee04842d05f999c80e4e6dd25ef0791e02b163bb6a71f0df7798382352294f203f19
- SSDEEP
  
  6144:lvIj8N0oK0zat8GzwzkIX8NLoK0zat8GzwzkIXOgaNS:lQjeK0qjISsK0qjIBP
Score

10^/10

persistence upx
- Modifies system executable filetype association
  persistence
- Drops file in Drivers directory
- Sets service image path in registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Change Default File Association

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2