b2ada2cbb1545ac65110db6f198c6c34ea1cd713d74fabf35e792717d4a1ff5b | Triage

Sharing

General

Target

b2ada2cbb1545ac65110db6f198c6c34ea1cd713d74fabf35e792717d4a1ff5b
Size

837KB
Sample

221106-jkbqjaadb4
MD5

207dfd0d50db175e9ec99374cb4832f1
SHA1

6574881439b075061919a9463908207f96eb282a
SHA256

b2ada2cbb1545ac65110db6f198c6c34ea1cd713d74fabf35e792717d4a1ff5b
SHA512

a44b2168d0b41403ec9e5fb2b1870deddf63f6574a17ed4928715aae80240024144c4ac920c7131680e802536f12dcc6ea51c6b01d287d1cb1c66bef2a28f879
SSDEEP

24576:lI2EQj52i9zJgLSEcgfOWw1nFT7lzb+Q0ziF:lI2EQjX9z8ccoFtzbXF

Score

8^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  b2ada2cbb1545ac65110db6f198c6c34ea1cd713d74fabf35e792717d4a1ff5b
- Size
  
  837KB
- MD5
  
  207dfd0d50db175e9ec99374cb4832f1
- SHA1
  
  6574881439b075061919a9463908207f96eb282a
- SHA256
  
  b2ada2cbb1545ac65110db6f198c6c34ea1cd713d74fabf35e792717d4a1ff5b
- SHA512
  
  a44b2168d0b41403ec9e5fb2b1870deddf63f6574a17ed4928715aae80240024144c4ac920c7131680e802536f12dcc6ea51c6b01d287d1cb1c66bef2a28f879
- SSDEEP
  
  24576:lI2EQj52i9zJgLSEcgfOWw1nFT7lzb+Q0ziF:lI2EQjX9z8ccoFtzbXF
Score

8^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2