d4e623b479e361473ef53cc749cf8c98dadb1e4968bf5dd537ead8ba1e9e6a5a | Triage

Submit
Reports

Overview

overview

Static

static

8

d4e623b479...5a.exe

windows7-x64

d4e623b479...5a.exe

windows10-2004-x64

Sharing

General

Target

d4e623b479e361473ef53cc749cf8c98dadb1e4968bf5dd537ead8ba1e9e6a5a
Size

112KB
Sample

221123-tajy9sdd99
MD5

59e357d863733c4c343cf55de06afda0
SHA1

84b308653881f1fdb7bac8164e2fa5ba040ca5fd
SHA256

d4e623b479e361473ef53cc749cf8c98dadb1e4968bf5dd537ead8ba1e9e6a5a
SHA512

0ac1672a0453245e55dc996a7a1b9e781691f718d55cb27b0534df6d866d694ccf5a65c9623a770ad1889f6334a3e162455d33af3f261c90eedf63a3d0373f13
SSDEEP

1536:WwmM3Ygts6GTHPquFz86tJzUx9qOKr8rF0srLbVI/6ZSYt9ofa+16qel:WwmpTiadtp/r4XrfVS84p7e

Score

10^/10

evasion persistence upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

d4e623b479e361473ef53cc749cf8c98dadb1e4968bf5dd537ead8ba1e9e6a5a.exe

Resource

win7-20221111-en

evasion persistence upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

d4e623b479e361473ef53cc749cf8c98dadb1e4968bf5dd537ead8ba1e9e6a5a.exe

Resource

win10v2004-20221111-en

evasion persistence upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  d4e623b479e361473ef53cc749cf8c98dadb1e4968bf5dd537ead8ba1e9e6a5a
- Size
  
  112KB
- MD5
  
  59e357d863733c4c343cf55de06afda0
- SHA1
  
  84b308653881f1fdb7bac8164e2fa5ba040ca5fd
- SHA256
  
  d4e623b479e361473ef53cc749cf8c98dadb1e4968bf5dd537ead8ba1e9e6a5a
- SHA512
  
  0ac1672a0453245e55dc996a7a1b9e781691f718d55cb27b0534df6d866d694ccf5a65c9623a770ad1889f6334a3e162455d33af3f261c90eedf63a3d0373f13
- SSDEEP
  
  1536:WwmM3Ygts6GTHPquFz86tJzUx9qOKr8rF0srLbVI/6ZSYt9ofa+16qel:WwmpTiadtp/r4XrfVS84p7e
Score

10^/10

evasion persistence upx
- Modifies firewall policy service
  evasion
- Adds policy Run key to start application
  persistence
- Modifies Installed Components in the registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2

evasionpersistenceupx

© 2018-2024

Terms | Privacy