479fdb90b1f99703833d345968223cb74f454d765c686c3dce137b6b39649057 | Triage

Sharing

General

Target

479fdb90b1f99703833d345968223cb74f454d765c686c3dce137b6b39649057
Size

71KB
Sample

221029-z85arafgb4
MD5

a35df223b76554acba0267cecec094f0
SHA1

0cbc52bc50888832e9d9413caba0780a9c9fc516
SHA256

479fdb90b1f99703833d345968223cb74f454d765c686c3dce137b6b39649057
SHA512

02bce85f84369d8d0d4c2906f1f5e1abe9948ef97973d94ea7dd213231c444437f574e18cbc76f6604ca569b6b32c33b07236e5bd5f3348c57fae0f49a43dda7
SSDEEP

1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSALl7Q1:5JjcF8KfCOcjk+guPVjSKl7Q1

Score

8^/10

persistence upx

Malware Config

Targets

- Target
  
  479fdb90b1f99703833d345968223cb74f454d765c686c3dce137b6b39649057
- Size
  
  71KB
- MD5
  
  a35df223b76554acba0267cecec094f0
- SHA1
  
  0cbc52bc50888832e9d9413caba0780a9c9fc516
- SHA256
  
  479fdb90b1f99703833d345968223cb74f454d765c686c3dce137b6b39649057
- SHA512
  
  02bce85f84369d8d0d4c2906f1f5e1abe9948ef97973d94ea7dd213231c444437f574e18cbc76f6604ca569b6b32c33b07236e5bd5f3348c57fae0f49a43dda7
- SSDEEP
  
  1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSALl7Q1:5JjcF8KfCOcjk+guPVjSKl7Q1
Score

8^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2