d292de3e51461dae3229ecffb78e31160d753d5c3aa31724b5fac331c7d62775 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d292de3e51461dae3229ecffb78e31160d753d5c3aa31724b5fac331c7d62775
Size

35KB
Sample

221019-s28ahaeag4
MD5

a10c405ede090b7bf5511a1ac3b3a000
SHA1

db6fe8c8669174babb350c3c41f970da0dcd7bdc
SHA256

d292de3e51461dae3229ecffb78e31160d753d5c3aa31724b5fac331c7d62775
SHA512

bf0ef9f38d840410fd3b0e81336ea01b6896e6dc35210d3140eb1021cae1a263ff489ad2f579597365ec7dae9a1b42fe090ffe31c3800fdf13855f0993d278d0
SSDEEP

768:OWMRMO8nnF1Yt/ybUZkFPd8wpS9hucD5+Kwqrrdfr:OL8nM5ybQ/4YhT3wqlz

Score

8^/10

persistence upx

Malware Config

Targets

- Target
  
  d292de3e51461dae3229ecffb78e31160d753d5c3aa31724b5fac331c7d62775
- Size
  
  35KB
- MD5
  
  a10c405ede090b7bf5511a1ac3b3a000
- SHA1
  
  db6fe8c8669174babb350c3c41f970da0dcd7bdc
- SHA256
  
  d292de3e51461dae3229ecffb78e31160d753d5c3aa31724b5fac331c7d62775
- SHA512
  
  bf0ef9f38d840410fd3b0e81336ea01b6896e6dc35210d3140eb1021cae1a263ff489ad2f579597365ec7dae9a1b42fe090ffe31c3800fdf13855f0993d278d0
- SSDEEP
  
  768:OWMRMO8nnF1Yt/ybUZkFPd8wpS9hucD5+Kwqrrdfr:OL8nM5ybQ/4YhT3wqlz
Score

8^/10

persistence upx
- Adds policy Run key to start application
  persistence
- Sets service image path in registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2