Overview

overview

8

Static

static

32597fef38...47.exe

windows7-x64

8

32597fef38...47.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32597fef3858d407645f9a79f35861f80eeec12c0b8dbc20bb3ef6b583e0c747

  • Size

    504KB

  • Sample

    221123-rz57pahh77

  • MD5

    f77c20e721317dc42bdf715c800ae1b2

  • SHA1

    b08b3931069020d4e55b1ac36c340a88a900a4cd

  • SHA256

    32597fef3858d407645f9a79f35861f80eeec12c0b8dbc20bb3ef6b583e0c747

  • SHA512

    292cf6b84bbcd74665186f61f987c16ed72d07bac3122c568b0c99ac5773965a8a0893a8d97a8471429e827c3711ae4ccd8ff43cafa92ac36434fb1a168ac788

  • SSDEEP

    12288:B298RDZERwRx3cSpeanHZFi3z7xWv7yhpCL+QSSE:BrRDlspanHZozrbRK

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      32597fef3858d407645f9a79f35861f80eeec12c0b8dbc20bb3ef6b583e0c747

    • Size

      504KB

    • MD5

      f77c20e721317dc42bdf715c800ae1b2

    • SHA1

      b08b3931069020d4e55b1ac36c340a88a900a4cd

    • SHA256

      32597fef3858d407645f9a79f35861f80eeec12c0b8dbc20bb3ef6b583e0c747

    • SHA512

      292cf6b84bbcd74665186f61f987c16ed72d07bac3122c568b0c99ac5773965a8a0893a8d97a8471429e827c3711ae4ccd8ff43cafa92ac36434fb1a168ac788

    • SSDEEP

      12288:B298RDZERwRx3cSpeanHZFi3z7xWv7yhpCL+QSSE:BrRDlspanHZozrbRK

    Score
    8/10
    persistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks