095380bcd82017bb34add265e6af795b77ad6c4e018e13253ad6c2a4af7a1d9f | Triage

Sharing

General

Target

sample_98
Size

498KB
Sample

221124-lc5pradg88
MD5

9345d04c518e870eef5e2cf17bd31124
SHA1

afdc13ca387b751a9d6e3458c78cb947d36f8732
SHA256

095380bcd82017bb34add265e6af795b77ad6c4e018e13253ad6c2a4af7a1d9f
SHA512

860b577d11e06363fa0ed7680c533fee76bee129b6b3148e3133cd47bde05f1ed68a1f04cfe8a937b88505d11cdfc31caf92fc10a4551503187707f46c84918c
SSDEEP

12288:n/3VRjDgPLRv7g2SVx/ZG6Gqpwp6gKX3lH9KZuqrR06sjiQbM:n/3V1gPLRv7g5PZpHzgKX3laZs2gM

Score

8^/10

persistence upx

Malware Config

Targets

- Target
  
  sample_98
- Size
  
  498KB
- MD5
  
  9345d04c518e870eef5e2cf17bd31124
- SHA1
  
  afdc13ca387b751a9d6e3458c78cb947d36f8732
- SHA256
  
  095380bcd82017bb34add265e6af795b77ad6c4e018e13253ad6c2a4af7a1d9f
- SHA512
  
  860b577d11e06363fa0ed7680c533fee76bee129b6b3148e3133cd47bde05f1ed68a1f04cfe8a937b88505d11cdfc31caf92fc10a4551503187707f46c84918c
- SSDEEP
  
  12288:n/3VRjDgPLRv7g2SVx/ZG6Gqpwp6gKX3lH9KZuqrR06sjiQbM:n/3V1gPLRv7g5PZpHzgKX3laZs2gM
Score

8^/10

persistence upx
- Modifies Installed Components in the registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2