8f0da35591128ac109b6a39e7aabeab999c83f0e61a2ca59a0ab85e220a3fb10 | Triage

Submit
Reports

Overview

overview

8

Static

static

8

8f0da35591...10.exe

windows7-x64

8

8f0da35591...10.exe

windows10-2004-x64

8

Sharing

General

Target

8f0da35591128ac109b6a39e7aabeab999c83f0e61a2ca59a0ab85e220a3fb10
Size

296KB
Sample

221124-gpddtadb29
MD5

135c7c3e7203453ae74678c5996d018a
SHA1

123fd1cbc5dda5a4ca13e147369bca38b716e780
SHA256

8f0da35591128ac109b6a39e7aabeab999c83f0e61a2ca59a0ab85e220a3fb10
SHA512

5cc64b6f106a62dcd4f257948f91fa222355496ac2a8972a5e62d4da78fb7bcd6e8a6446aa691a4c1092b224d66436a03fa95f7ae2e3baffe30cd9def151081b
SSDEEP

6144:Q1db49+rEg024fpLZazEjvE/rbay19tSt4bO2BaDmeBJe59kIIw:QjkArEN249AyE/rbaMct4bO2/V4w

Score

8^/10

evasion persistence trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

8f0da35591128ac109b6a39e7aabeab999c83f0e61a2ca59a0ab85e220a3fb10.exe

Resource

win7-20221111-en

evasion persistence trojan upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

8f0da35591128ac109b6a39e7aabeab999c83f0e61a2ca59a0ab85e220a3fb10.exe

Resource

win10v2004-20220812-en

evasion persistence trojan upx

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  8f0da35591128ac109b6a39e7aabeab999c83f0e61a2ca59a0ab85e220a3fb10
- Size
  
  296KB
- MD5
  
  135c7c3e7203453ae74678c5996d018a
- SHA1
  
  123fd1cbc5dda5a4ca13e147369bca38b716e780
- SHA256
  
  8f0da35591128ac109b6a39e7aabeab999c83f0e61a2ca59a0ab85e220a3fb10
- SHA512
  
  5cc64b6f106a62dcd4f257948f91fa222355496ac2a8972a5e62d4da78fb7bcd6e8a6446aa691a4c1092b224d66436a03fa95f7ae2e3baffe30cd9def151081b
- SSDEEP
  
  6144:Q1db49+rEg024fpLZazEjvE/rbay19tSt4bO2BaDmeBJe59kIIw:QjkArEN249AyE/rbaMct4bO2/V4w
Score

8^/10

evasion persistence trojan upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojanupx

behavioral2

evasionpersistencetrojanupx

© 2018-2024

Terms | Privacy