3327bb67ae9d3398d40d3f0b3078dca8cb787179cce22e8f17a391c8af7d8bae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3327bb67ae9d3398d40d3f0b3078dca8cb787179cce22e8f17a391c8af7d8bae
Size

82KB
Sample

221019-xtf89sdecl
MD5

a175953be716fd86bd2949665b8c6f70
SHA1

7c02fd6ff4398b5641cf65b303ace028188eae25
SHA256

3327bb67ae9d3398d40d3f0b3078dca8cb787179cce22e8f17a391c8af7d8bae
SHA512

8c275c5fde1bdadfddd088dd28004a0833ce70af4b5b15a692d1c9c0295c7211fbfad16978394d63722376d3c8f94b5bc43dabdd76c673331b118298974d009e
SSDEEP

1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSjHRYAJB6v1yu8ecpYgMAT:5JjcF8KfCOcjk+guPVjSjxYcovMu8ecx

Score

8^/10

persistence upx

Malware Config

Targets

- Target
  
  3327bb67ae9d3398d40d3f0b3078dca8cb787179cce22e8f17a391c8af7d8bae
- Size
  
  82KB
- MD5
  
  a175953be716fd86bd2949665b8c6f70
- SHA1
  
  7c02fd6ff4398b5641cf65b303ace028188eae25
- SHA256
  
  3327bb67ae9d3398d40d3f0b3078dca8cb787179cce22e8f17a391c8af7d8bae
- SHA512
  
  8c275c5fde1bdadfddd088dd28004a0833ce70af4b5b15a692d1c9c0295c7211fbfad16978394d63722376d3c8f94b5bc43dabdd76c673331b118298974d009e
- SSDEEP
  
  1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSjHRYAJB6v1yu8ecpYgMAT:5JjcF8KfCOcjk+guPVjSjxYcovMu8ecx
Score

8^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2