Overview

overview

8

Static

static

8

dbd05eeed3...9f.exe

windows7-x64

8

dbd05eeed3...9f.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbd05eeed32253ab47e38f0c1a994476af486b1d16ec4c95272be875817a439f

  • Size

    671KB

  • Sample

    221126-kxztkaae9z

  • MD5

    c23a30ba2ec6bf09bed687789f3bab46

  • SHA1

    8de86b57337a298b6e9c42991ed515f3dfb211fb

  • SHA256

    dbd05eeed32253ab47e38f0c1a994476af486b1d16ec4c95272be875817a439f

  • SHA512

    4242b57edd34eb47cdbc98156af9eed9df335ee1115ab04818289c78f717d4462110c637c7c6afa6c77824be36755b6c7d9760ecf79672c263d4989cff664917

  • SSDEEP

    12288:E0tDrxKSfwBWYfamCsb1OHvKeAHrkMvlZtz2UdF500Ud9zFnlXnkRQjz:E0JTaWgzJheABZj00+zFlXQQj

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      dbd05eeed32253ab47e38f0c1a994476af486b1d16ec4c95272be875817a439f

    • Size

      671KB

    • MD5

      c23a30ba2ec6bf09bed687789f3bab46

    • SHA1

      8de86b57337a298b6e9c42991ed515f3dfb211fb

    • SHA256

      dbd05eeed32253ab47e38f0c1a994476af486b1d16ec4c95272be875817a439f

    • SHA512

      4242b57edd34eb47cdbc98156af9eed9df335ee1115ab04818289c78f717d4462110c637c7c6afa6c77824be36755b6c7d9760ecf79672c263d4989cff664917

    • SSDEEP

      12288:E0tDrxKSfwBWYfamCsb1OHvKeAHrkMvlZtz2UdF500Ud9zFnlXnkRQjz:E0JTaWgzJheABZj00+zFlXQQj

    Score
    8/10
    persistenceupx

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks