de2559d85870b9e09f9769f8c240ba7ae9593825a515c5897e7e32ede5238419 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de2559d85870b9e09f9769f8c240ba7ae9593825a515c5897e7e32ede5238419
Size

827KB
Sample

221127-l1r4kacf9x
MD5

0be40c1dc5d833ada5a491d7434e4ea4
SHA1

87e06ad1a1321a184ecccc6ac8a5bf5286c26b39
SHA256

de2559d85870b9e09f9769f8c240ba7ae9593825a515c5897e7e32ede5238419
SHA512

64362180a21d69f5a9c6acdc3a240964e52ba4a4da763c096911c0d38392444e7332fc4ffa171c594e4e368b4b78c3b68ae999f6e7bc20999f14226526ed1621
SSDEEP

24576:9rxXLDRiqJ+MLK+0JdAEo1mGajnVmLUx:9VLDEmp+RJgQJjnIAx

Score

8^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  de2559d85870b9e09f9769f8c240ba7ae9593825a515c5897e7e32ede5238419
- Size
  
  827KB
- MD5
  
  0be40c1dc5d833ada5a491d7434e4ea4
- SHA1
  
  87e06ad1a1321a184ecccc6ac8a5bf5286c26b39
- SHA256
  
  de2559d85870b9e09f9769f8c240ba7ae9593825a515c5897e7e32ede5238419
- SHA512
  
  64362180a21d69f5a9c6acdc3a240964e52ba4a4da763c096911c0d38392444e7332fc4ffa171c594e4e368b4b78c3b68ae999f6e7bc20999f14226526ed1621
- SSDEEP
  
  24576:9rxXLDRiqJ+MLK+0JdAEo1mGajnVmLUx:9VLDEmp+RJgQJjnIAx
Score

8^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2