64926ae1050636a4494456351f5ccbb34ac920167095ca55e48b28601628caf3 | Triage

Submit
Reports

Overview

overview

Static

static

8

64926ae105...f3.exe

windows7-x64

64926ae105...f3.exe

windows10-2004-x64

Sharing

General

Target

64926ae1050636a4494456351f5ccbb34ac920167095ca55e48b28601628caf3
Size

199KB
Sample

221123-vp2y3ace8x
MD5

964065c1a9f017b646a4bd6ab98f03f8
SHA1

84d22a0643d84621c5dace86a0f2477c9b051d20
SHA256

64926ae1050636a4494456351f5ccbb34ac920167095ca55e48b28601628caf3
SHA512

499a8659ba97e418cfb7fa11894a4d79d6f64e83d17ef835c03decdb7c51d3b06101995de474a7b0ab03d82846c721f60e2af0b91614df6b0a6e286a415eb3a7
SSDEEP

6144:qOdcQ/5T8HeP83ZmNvczKBXBC0lJqDoSr:qOj/5T8HePyemK1coS

Score

10^/10

evasion trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

64926ae1050636a4494456351f5ccbb34ac920167095ca55e48b28601628caf3.exe

Resource

win7-20221111-en

evasion trojan upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

64926ae1050636a4494456351f5ccbb34ac920167095ca55e48b28601628caf3.exe

Resource

win10v2004-20221111-en

evasion trojan upx

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  64926ae1050636a4494456351f5ccbb34ac920167095ca55e48b28601628caf3
- Size
  
  199KB
- MD5
  
  964065c1a9f017b646a4bd6ab98f03f8
- SHA1
  
  84d22a0643d84621c5dace86a0f2477c9b051d20
- SHA256
  
  64926ae1050636a4494456351f5ccbb34ac920167095ca55e48b28601628caf3
- SHA512
  
  499a8659ba97e418cfb7fa11894a4d79d6f64e83d17ef835c03decdb7c51d3b06101995de474a7b0ab03d82846c721f60e2af0b91614df6b0a6e286a415eb3a7
- SSDEEP
  
  6144:qOdcQ/5T8HeP83ZmNvczKBXBC0lJqDoSr:qOj/5T8HePyemK1coS
Score

10^/10

evasion trojan upx
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasiontrojanupx

behavioral2

evasiontrojanupx

© 2018-2024

Terms | Privacy