bd21ba07f69e625614f6cb65dd4041017dc21f3bc8661b45dd4778743741cb9a | Triage

Submit
Reports

Overview

overview

Static

static

8

bd21ba07f6...9a.exe

windows7-x64

bd21ba07f6...9a.exe

windows10-2004-x64

Sharing

General

Target

bd21ba07f69e625614f6cb65dd4041017dc21f3bc8661b45dd4778743741cb9a
Size

152KB
Sample

221012-sf581sgfb3
MD5

7a15215d0abea745966c325a9315d220
SHA1

cf769d6fa6ebde3cfea964ad6c855042cbce9cd8
SHA256

bd21ba07f69e625614f6cb65dd4041017dc21f3bc8661b45dd4778743741cb9a
SHA512

c02871a3d2357f5d258b6aa809bd6133cd715422ce588c89c47929c4bf6309b3aaca0424a1fbe30f863fece21855d53a381c7e6c2756bc585311194257aa6557
SSDEEP

3072:aYGoQzoTYd3bYMSReVJd3uCFkvH5OEcYGoQzoTYd3bYMSReVJd3uCFkvH5OE:WzoybmeVJISUUzoybmeVJISU

Score

10^/10

evasion persistence upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

bd21ba07f69e625614f6cb65dd4041017dc21f3bc8661b45dd4778743741cb9a.exe

Resource

win7-20220901-en

evasion persistence upx

windows7-x64

17 signatures

150 seconds

Behavioral task

behavioral2

Sample

bd21ba07f69e625614f6cb65dd4041017dc21f3bc8661b45dd4778743741cb9a.exe

Resource

win10v2004-20220812-en

evasion persistence upx

windows10-2004-x64

17 signatures

150 seconds

Malware Config

Targets

- Target
  
  bd21ba07f69e625614f6cb65dd4041017dc21f3bc8661b45dd4778743741cb9a
- Size
  
  152KB
- MD5
  
  7a15215d0abea745966c325a9315d220
- SHA1
  
  cf769d6fa6ebde3cfea964ad6c855042cbce9cd8
- SHA256
  
  bd21ba07f69e625614f6cb65dd4041017dc21f3bc8661b45dd4778743741cb9a
- SHA512
  
  c02871a3d2357f5d258b6aa809bd6133cd715422ce588c89c47929c4bf6309b3aaca0424a1fbe30f863fece21855d53a381c7e6c2756bc585311194257aa6557
- SSDEEP
  
  3072:aYGoQzoTYd3bYMSReVJd3uCFkvH5OEcYGoQzoTYd3bYMSReVJd3uCFkvH5OE:WzoybmeVJISUUzoybmeVJISU
Score

10^/10

evasion persistence upx
- Modifies system executable filetype association
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Sets file execution options in registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops startup file
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Change Default File Association

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2

evasionpersistenceupx

© 2018-2025

Terms | Privacy