Overview

overview

8

Static

static

8

22811cffad...f1.exe

windows7-x64

8

22811cffad...f1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22811cffad0cb88261155f043304efa7683c1d764f1f50d25bd60e82ce48d9f1

  • Size

    817KB

  • Sample

    221125-sn1nhaba2v

  • MD5

    14bf0ccff0d4cb780a5c969dded3d688

  • SHA1

    3ccd515d88924bcd709d1111d5ab5703b502b3ec

  • SHA256

    22811cffad0cb88261155f043304efa7683c1d764f1f50d25bd60e82ce48d9f1

  • SHA512

    91860d322a5042b366996cb37640d44a6e75e57d7f46ba3d872163e61fc9dd08bb5f2373b6cd23a7062546228ad29c1ffe449d760b70ca354839d45f0ccfa864

  • SSDEEP

    24576:HPKhtIDX4O2ghNAudEYXHaP9DjYYGrJPbC7PSbNj0:HPi0Z2GAud49P8C7Pk

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      22811cffad0cb88261155f043304efa7683c1d764f1f50d25bd60e82ce48d9f1

    • Size

      817KB

    • MD5

      14bf0ccff0d4cb780a5c969dded3d688

    • SHA1

      3ccd515d88924bcd709d1111d5ab5703b502b3ec

    • SHA256

      22811cffad0cb88261155f043304efa7683c1d764f1f50d25bd60e82ce48d9f1

    • SHA512

      91860d322a5042b366996cb37640d44a6e75e57d7f46ba3d872163e61fc9dd08bb5f2373b6cd23a7062546228ad29c1ffe449d760b70ca354839d45f0ccfa864

    • SSDEEP

      24576:HPKhtIDX4O2ghNAudEYXHaP9DjYYGrJPbC7PSbNj0:HPi0Z2GAud49P8C7Pk

    Score
    8/10
    persistenceupx

    • Drops file in Drivers directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks