Overview

overview

8

Static

static

8

b22acf09a1...b9.exe

windows7-x64

8

b22acf09a1...b9.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b22acf09a11a974a6cabacda1d8106e682eda981217a9a38c06d16406ad5a7b9

  • Size

    80KB

  • Sample

    221126-kx1qvsff23

  • MD5

    ac7daf7df9943f3c1f76519b02b6f560

  • SHA1

    d5439f17d6bb2e0dbdb2e32ca9d988844cdd5965

  • SHA256

    b22acf09a11a974a6cabacda1d8106e682eda981217a9a38c06d16406ad5a7b9

  • SHA512

    807e6d7e553cd6ce7c6e627018a2cc12b11cc395a7a8c677f2bb7f74ed210ae76b2d17af2a1d8c6c18467de5f15d8e8b658d385757bda0e6916c8c1c8c344079

  • SSDEEP

    1536:47skKNqRSQ911QzZiD6n2cJAn0n0SoqLxlxi0YbyhVKCRnQd0dni4sy:47s9NUSKbeZiGn2cGn00g0VoVnRnC0dx

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      b22acf09a11a974a6cabacda1d8106e682eda981217a9a38c06d16406ad5a7b9

    • Size

      80KB

    • MD5

      ac7daf7df9943f3c1f76519b02b6f560

    • SHA1

      d5439f17d6bb2e0dbdb2e32ca9d988844cdd5965

    • SHA256

      b22acf09a11a974a6cabacda1d8106e682eda981217a9a38c06d16406ad5a7b9

    • SHA512

      807e6d7e553cd6ce7c6e627018a2cc12b11cc395a7a8c677f2bb7f74ed210ae76b2d17af2a1d8c6c18467de5f15d8e8b658d385757bda0e6916c8c1c8c344079

    • SSDEEP

      1536:47skKNqRSQ911QzZiD6n2cJAn0n0SoqLxlxi0YbyhVKCRnQd0dni4sy:47s9NUSKbeZiGn2cGn00g0VoVnRnC0dx

    Score
    8/10
    persistenceupx

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks