a5a6d65508805f873c0e6a827468460ebb8edf0b7c4a085ff051bb56136c455c | Triage

Sharing

General

Target

a5a6d65508805f873c0e6a827468460ebb8edf0b7c4a085ff051bb56136c455c
Size

69KB
Sample

221030-dzg8zabcam
MD5

a3323ec0d269bfd8e2483dff64d76410
SHA1

a321ded41d13fb992f3b9486f4477f3b09e10202
SHA256

a5a6d65508805f873c0e6a827468460ebb8edf0b7c4a085ff051bb56136c455c
SHA512

e706794716a31181a2799efe0fe128e732852bdc9a346495f9214ee5648697293065d83d8fb5e07c65fc372673018a83d747d83536e33898534d1f3c59a8ac0f
SSDEEP

1536:MHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtA6Dw/8AR3/f2ETSso:MHoLde/OgV432UcP39hXJZnlc/9tf2EM

Score

8^/10

persistence upx

Malware Config

Targets

- Target
  
  a5a6d65508805f873c0e6a827468460ebb8edf0b7c4a085ff051bb56136c455c
- Size
  
  69KB
- MD5
  
  a3323ec0d269bfd8e2483dff64d76410
- SHA1
  
  a321ded41d13fb992f3b9486f4477f3b09e10202
- SHA256
  
  a5a6d65508805f873c0e6a827468460ebb8edf0b7c4a085ff051bb56136c455c
- SHA512
  
  e706794716a31181a2799efe0fe128e732852bdc9a346495f9214ee5648697293065d83d8fb5e07c65fc372673018a83d747d83536e33898534d1f3c59a8ac0f
- SSDEEP
  
  1536:MHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtA6Dw/8AR3/f2ETSso:MHoLde/OgV432UcP39hXJZnlc/9tf2EM
Score

8^/10

persistence upx
- Modifies AppInit DLL entries
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2