b9e1b317be9dd5fd82fa746f90386c663b5681e1364b4a38ba531fdf5aefdf47 | Triage

Submit
Reports

Overview

overview

Static

static

b9e1b317be...47.exe

windows7-x64

b9e1b317be...47.exe

windows10-2004-x64

Sharing

General

Target

b9e1b317be9dd5fd82fa746f90386c663b5681e1364b4a38ba531fdf5aefdf47
Size

344KB
Sample

221004-e1g52acagq
MD5

5e5c155a8fdf8d04882a15c9b8a60390
SHA1

d4626e3249c89be8018d2d47b8e172209014aaa7
SHA256

b9e1b317be9dd5fd82fa746f90386c663b5681e1364b4a38ba531fdf5aefdf47
SHA512

6a2a2923cf7c9edfd0ccf6f525bc0e0d809b38f70c3d7518b66763eb279fe337033c2cae371ed81f3928103b68a1f03e4c9afcdace85e16fde7789820ec3a601
SSDEEP

6144:gqCSaCaTDTXmNOzCpjjhjNAW/g1sIYstrH1dAVZru/rqzcIBe/rUc19n:TZ4TDDmNOzKnDAWo1s5MV6VIzqwr/gc7

Score

10^/10

evasion persistence upx

Static task

static1

Behavioral task

behavioral1

Sample

b9e1b317be9dd5fd82fa746f90386c663b5681e1364b4a38ba531fdf5aefdf47.exe

Resource

win7-20220812-en

evasion persistence upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

b9e1b317be9dd5fd82fa746f90386c663b5681e1364b4a38ba531fdf5aefdf47.exe

Resource

win10v2004-20220812-en

evasion persistence upx

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  b9e1b317be9dd5fd82fa746f90386c663b5681e1364b4a38ba531fdf5aefdf47
- Size
  
  344KB
- MD5
  
  5e5c155a8fdf8d04882a15c9b8a60390
- SHA1
  
  d4626e3249c89be8018d2d47b8e172209014aaa7
- SHA256
  
  b9e1b317be9dd5fd82fa746f90386c663b5681e1364b4a38ba531fdf5aefdf47
- SHA512
  
  6a2a2923cf7c9edfd0ccf6f525bc0e0d809b38f70c3d7518b66763eb279fe337033c2cae371ed81f3928103b68a1f03e4c9afcdace85e16fde7789820ec3a601
- SSDEEP
  
  6144:gqCSaCaTDTXmNOzCpjjhjNAW/g1sIYstrH1dAVZru/rqzcIBe/rUc19n:TZ4TDDmNOzKnDAWo1s5MV6VIzqwr/gc7
Score

10^/10

evasion persistence upx
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2

evasionpersistenceupx

© 2018-2025

Terms | Privacy