555e9164d849695a5f1d3456325cc6ea27d8a5cb35a14eb98a5d1643cb8e26a0 | Triage

Submit
Reports

Overview

overview

Static

static

8

555e9164d8...a0.exe

windows7-x64

555e9164d8...a0.exe

windows10-2004-x64

Sharing

General

Target

555e9164d849695a5f1d3456325cc6ea27d8a5cb35a14eb98a5d1643cb8e26a0
Size

1.8MB
Sample

221127-yw2hnaeg45
MD5

5d94fe1e345dc5818ae4adf0e907b1a6
SHA1

04504ad49cdd69f86b83447425ea46d9a97bff14
SHA256

555e9164d849695a5f1d3456325cc6ea27d8a5cb35a14eb98a5d1643cb8e26a0
SHA512

186b27edaf4e0e5ea0c6817263669076808f63b4f8a7897cc2e49c60f1b00c245284ac29ff18957f32acce9855b0bf572cf2fe7b7a3eb36c012324c4895fac43
SSDEEP

12288:gOwOB0fOjOB03UO3OB0fOjOB03UO3OB0fOjOB03UO3OB0fOjOB03bBZoOB0H:aOZOI9OZOI9OZOI9OZOIPoOM

Score

10^/10

evasion persistence upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

555e9164d849695a5f1d3456325cc6ea27d8a5cb35a14eb98a5d1643cb8e26a0.exe

Resource

win7-20221111-en

evasion persistence upx

windows7-x64

17 signatures

150 seconds

Behavioral task

behavioral2

Sample

555e9164d849695a5f1d3456325cc6ea27d8a5cb35a14eb98a5d1643cb8e26a0.exe

Resource

win10v2004-20220901-en

evasion persistence upx

windows10-2004-x64

16 signatures

150 seconds

Malware Config

Targets

- Target
  
  555e9164d849695a5f1d3456325cc6ea27d8a5cb35a14eb98a5d1643cb8e26a0
- Size
  
  1.8MB
- MD5
  
  5d94fe1e345dc5818ae4adf0e907b1a6
- SHA1
  
  04504ad49cdd69f86b83447425ea46d9a97bff14
- SHA256
  
  555e9164d849695a5f1d3456325cc6ea27d8a5cb35a14eb98a5d1643cb8e26a0
- SHA512
  
  186b27edaf4e0e5ea0c6817263669076808f63b4f8a7897cc2e49c60f1b00c245284ac29ff18957f32acce9855b0bf572cf2fe7b7a3eb36c012324c4895fac43
- SSDEEP
  
  12288:gOwOB0fOjOB03UO3OB0fOjOB03UO3OB0fOjOB03UO3OB0fOjOB03bBZoOB0H:aOZOI9OZOI9OZOI9OZOIPoOM
Score

10^/10

evasion persistence upx
- Modifies visibility of file extensions in Explorer
  evasion
- Blocks application from running via registry modification
  Adds application to list of disallowed applications.
  evasion
- Executes dropped EXE
- Sets file execution options in registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Replication Through Removable Media

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Replication Through Removable Media

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2

evasionpersistenceupx

© 2018-2025

Terms | Privacy