Overview

overview

8

Static

static

4aa6e55d6b...2a.exe

windows7-x64

8

4aa6e55d6b...2a.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4aa6e55d6bec213d108f1fec755bbce549b6c8f5c1f3cdc40ebd14146e4d2a2a

  • Size

    288KB

  • Sample

    221123-vt6stach8w

  • MD5

    170c6f65990be00ae9ac9cf010f5fbf4

  • SHA1

    0116c544bd06a7bf5de8f484fb14250e34ad0237

  • SHA256

    4aa6e55d6bec213d108f1fec755bbce549b6c8f5c1f3cdc40ebd14146e4d2a2a

  • SHA512

    d6b3baca6592e2f709e92d761c7a2a89bdce88135a7982ea33c8a145a5e81f2b119df69fd3a62372a0107746e15fc74e8402c97465311dd77d78fcfb4e1957ca

  • SSDEEP

    3072:TvoF4J/lzmmNgWEDMTbyWf8HtsUVmA3JYNCsmgoOQDut7yhVEu/jCWLPKYOhgvIU:Tvo6P6m2YTbyWUNgAFDht/dGLhQIrkJ

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      4aa6e55d6bec213d108f1fec755bbce549b6c8f5c1f3cdc40ebd14146e4d2a2a

    • Size

      288KB

    • MD5

      170c6f65990be00ae9ac9cf010f5fbf4

    • SHA1

      0116c544bd06a7bf5de8f484fb14250e34ad0237

    • SHA256

      4aa6e55d6bec213d108f1fec755bbce549b6c8f5c1f3cdc40ebd14146e4d2a2a

    • SHA512

      d6b3baca6592e2f709e92d761c7a2a89bdce88135a7982ea33c8a145a5e81f2b119df69fd3a62372a0107746e15fc74e8402c97465311dd77d78fcfb4e1957ca

    • SSDEEP

      3072:TvoF4J/lzmmNgWEDMTbyWf8HtsUVmA3JYNCsmgoOQDut7yhVEu/jCWLPKYOhgvIU:Tvo6P6m2YTbyWUNgAFDht/dGLhQIrkJ

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

3
T1060

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks