46fb442e2842dccad4d7e5159f57ce75d29bc974b7c80f7b860f81a444a1bb3b | Triage

Submit
Reports

Overview

overview

8

Static

static

8

46fb442e28...3b.exe

windows7-x64

8

46fb442e28...3b.exe

windows10-2004-x64

8

Sharing

General

Target

46fb442e2842dccad4d7e5159f57ce75d29bc974b7c80f7b860f81a444a1bb3b
Size

327KB
Sample

221020-f7lmgafhg8
MD5

795675e887c5e5a6b4e03c14f305db30
SHA1

71e51057362f6284a1ee3af686d93bc9c2fd60d1
SHA256

46fb442e2842dccad4d7e5159f57ce75d29bc974b7c80f7b860f81a444a1bb3b
SHA512

3b8102b971f898f9ac15dfe31de05daaddd7fc3f744aec3544a31b255d528069495a464d6a598715939529b32c740597bd5c184850ff7defec34c554238f174e
SSDEEP

6144:zuIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qL3ks3ih1XGWz:q6Wq4aaE6KwyF5L0Y2D1PqLF3c2Q

Score

8^/10

upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

46fb442e2842dccad4d7e5159f57ce75d29bc974b7c80f7b860f81a444a1bb3b.exe

Resource

win7-20220812-en

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

46fb442e2842dccad4d7e5159f57ce75d29bc974b7c80f7b860f81a444a1bb3b.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  46fb442e2842dccad4d7e5159f57ce75d29bc974b7c80f7b860f81a444a1bb3b
- Size
  
  327KB
- MD5
  
  795675e887c5e5a6b4e03c14f305db30
- SHA1
  
  71e51057362f6284a1ee3af686d93bc9c2fd60d1
- SHA256
  
  46fb442e2842dccad4d7e5159f57ce75d29bc974b7c80f7b860f81a444a1bb3b
- SHA512
  
  3b8102b971f898f9ac15dfe31de05daaddd7fc3f744aec3544a31b255d528069495a464d6a598715939529b32c740597bd5c184850ff7defec34c554238f174e
- SSDEEP
  
  6144:zuIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qL3ks3ih1XGWz:q6Wq4aaE6KwyF5L0Y2D1PqLF3c2Q
Score

8^/10

upx
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy