d26cea107dc4fbdd6dd38085af7ff0e093428c1e58e45a8e11b861fbbab6a107 | Triage

Sharing

General

Target

d26cea107dc4fbdd6dd38085af7ff0e093428c1e58e45a8e11b861fbbab6a107
Size

836KB
Sample

221201-vnpmcadf4s
MD5

c5384e4f219444b362f4eabb0ed691f4
SHA1

3ae4379927fed5da2c6478b4a1f05085d3eedb6c
SHA256

d26cea107dc4fbdd6dd38085af7ff0e093428c1e58e45a8e11b861fbbab6a107
SHA512

f1147c75b17efbb48377ad20032e0cce4aa1626d85ce717f84f5b779204ee9015aef7b0a44394b335b346d5ce6fe1f42606d3788add269e552a6246babbe6342
SSDEEP

12288:gmHDGPRigEzJEwtudnp016VCXnBhGTxahwy8DUN8NOFZXGUiA7SrYjvPpd5RopHS:M9Ezftuz0GgnBzBQYMOrXz+UjZy9

Score

8^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  d26cea107dc4fbdd6dd38085af7ff0e093428c1e58e45a8e11b861fbbab6a107
- Size
  
  836KB
- MD5
  
  c5384e4f219444b362f4eabb0ed691f4
- SHA1
  
  3ae4379927fed5da2c6478b4a1f05085d3eedb6c
- SHA256
  
  d26cea107dc4fbdd6dd38085af7ff0e093428c1e58e45a8e11b861fbbab6a107
- SHA512
  
  f1147c75b17efbb48377ad20032e0cce4aa1626d85ce717f84f5b779204ee9015aef7b0a44394b335b346d5ce6fe1f42606d3788add269e552a6246babbe6342
- SSDEEP
  
  12288:gmHDGPRigEzJEwtudnp016VCXnBhGTxahwy8DUN8NOFZXGUiA7SrYjvPpd5RopHS:M9Ezftuz0GgnBzBQYMOrXz+UjZy9
Score

8^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2