61b32695e15973f0904160cb7ad52c3cb6e3c90f0b3492d4b0e2584dc2a477ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61b32695e15973f0904160cb7ad52c3cb6e3c90f0b3492d4b0e2584dc2a477ea
Size

79KB
Sample

221019-xrle7sddck
MD5

a22a154774b60c05c3bc65d4956e3bd0
SHA1

0946a33ddd90996043f4febef7e85b7e89c56467
SHA256

61b32695e15973f0904160cb7ad52c3cb6e3c90f0b3492d4b0e2584dc2a477ea
SHA512

fa5a9042fa00314eafa2d64ffcc70bbd02341760c452a1041bb126d05735fd86c5b5a6a013ac26d5f6e095f80fbf58f48978ec8033bde96d5bb9316720b1fa0c
SSDEEP

1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMS4oe3ymN7rciEhRw2L:5JjcF8KfCOcjk+guPVjS4rymJ1L2L

Score

8^/10

persistence upx

Malware Config

Targets

- Target
  
  61b32695e15973f0904160cb7ad52c3cb6e3c90f0b3492d4b0e2584dc2a477ea
- Size
  
  79KB
- MD5
  
  a22a154774b60c05c3bc65d4956e3bd0
- SHA1
  
  0946a33ddd90996043f4febef7e85b7e89c56467
- SHA256
  
  61b32695e15973f0904160cb7ad52c3cb6e3c90f0b3492d4b0e2584dc2a477ea
- SHA512
  
  fa5a9042fa00314eafa2d64ffcc70bbd02341760c452a1041bb126d05735fd86c5b5a6a013ac26d5f6e095f80fbf58f48978ec8033bde96d5bb9316720b1fa0c
- SSDEEP
  
  1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMS4oe3ymN7rciEhRw2L:5JjcF8KfCOcjk+guPVjS4rymJ1L2L
Score

8^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2