Overview

overview

8

Static

static

ac55cd8212...c6.exe

windows7-x64

8

ac55cd8212...c6.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac55cd82123ff04ef6aff0008966541a9cbc077a3876e372099fb4a233b6c0c6

  • Size

    751KB

  • Sample

    221128-p1z1ysdg24

  • MD5

    64f9354450846b5f6e8b8e6b9d07e763

  • SHA1

    1c0a60280acd7cceebfde1a8f60515685b0279bc

  • SHA256

    ac55cd82123ff04ef6aff0008966541a9cbc077a3876e372099fb4a233b6c0c6

  • SHA512

    79981e1f408fa90a6c40b5086bfc492bbe074401c39fe10b3c14ce47d6980f1d7324e6835cac8c6068a090e414a39f78d5b523009777d74499aa5f44100993fe

  • SSDEEP

    12288:6zLVMSEYrSURhbo4NoYnaEHI0vXYj/6BJfqs4WYmX7ZiDwQs1rwLrDW5x1Sjfs+t:6nVMSfSQ/aQvXYj/6BJis4iX7wXimrDv

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      ac55cd82123ff04ef6aff0008966541a9cbc077a3876e372099fb4a233b6c0c6

    • Size

      751KB

    • MD5

      64f9354450846b5f6e8b8e6b9d07e763

    • SHA1

      1c0a60280acd7cceebfde1a8f60515685b0279bc

    • SHA256

      ac55cd82123ff04ef6aff0008966541a9cbc077a3876e372099fb4a233b6c0c6

    • SHA512

      79981e1f408fa90a6c40b5086bfc492bbe074401c39fe10b3c14ce47d6980f1d7324e6835cac8c6068a090e414a39f78d5b523009777d74499aa5f44100993fe

    • SSDEEP

      12288:6zLVMSEYrSURhbo4NoYnaEHI0vXYj/6BJfqs4WYmX7ZiDwQs1rwLrDW5x1Sjfs+t:6nVMSfSQ/aQvXYj/6BJis4iX7wXimrDv

    Score
    8/10
    discoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks