Overview

overview

8

Static

static

8

5138a07703...5c.exe

windows7-x64

8

5138a07703...5c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5138a0770379fcc0cb964691fc7359f97921745e6522d5a7ad7e8e1eb6888b5c

  • Size

    74KB

  • Sample

    221125-kfpl9shc9v

  • MD5

    42b0a4f5b85d1f879d59295ccfe2661a

  • SHA1

    95793eb1be319fef9238a1e4db00665d4f6b7ff1

  • SHA256

    5138a0770379fcc0cb964691fc7359f97921745e6522d5a7ad7e8e1eb6888b5c

  • SHA512

    648a03bf8da3eb01bb3d2bde2cec1a796680d32de72f3070b9390a8af30589a92d24617b8468777be793cd743d304f64d04010de2aa959099c22e4d320690da7

  • SSDEEP

    1536:zvwIMUkn5lRjATpx6GWT4T/aj1DfKz0Sx6vGMHRYZ35iIEtjRsD4:bJknVKucT/u1+zPGHRkJyRs

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      5138a0770379fcc0cb964691fc7359f97921745e6522d5a7ad7e8e1eb6888b5c

    • Size

      74KB

    • MD5

      42b0a4f5b85d1f879d59295ccfe2661a

    • SHA1

      95793eb1be319fef9238a1e4db00665d4f6b7ff1

    • SHA256

      5138a0770379fcc0cb964691fc7359f97921745e6522d5a7ad7e8e1eb6888b5c

    • SHA512

      648a03bf8da3eb01bb3d2bde2cec1a796680d32de72f3070b9390a8af30589a92d24617b8468777be793cd743d304f64d04010de2aa959099c22e4d320690da7

    • SSDEEP

      1536:zvwIMUkn5lRjATpx6GWT4T/aj1DfKz0Sx6vGMHRYZ35iIEtjRsD4:bJknVKucT/u1+zPGHRkJyRs

    Score
    8/10
    discoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks