c53ddfe0157451c6e24596fb023751ca1a9a785f38b992c6df7a8624916e423f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c53ddfe0157451c6e24596fb023751ca1a9a785f38b992c6df7a8624916e423f
Size

829KB
Sample

221201-wnrblseb93
MD5

b476424fda0dd5966d8eb339594ba727
SHA1

4c4b3ab8261f10ff753c36fd74089aca1785ed07
SHA256

c53ddfe0157451c6e24596fb023751ca1a9a785f38b992c6df7a8624916e423f
SHA512

679c3e5c394f4a4d1bea24614fb3ac81ccf93aa5f3be6f3b66ec8caf7826b94fce452b146a63d3b2fb7043fef382240f7e6b89bfd6befbbf79f9efe5033f540e
SSDEEP

12288:H8ie7D6oIfwpq4XCTayV5/C+FO2vHEduSeEQkbn76p0nadS3UCBiT9zfMKdAVdVT:H8iffil2tK+FUduSey7NGWU6Q2ZVdQA

Score

8^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  c53ddfe0157451c6e24596fb023751ca1a9a785f38b992c6df7a8624916e423f
- Size
  
  829KB
- MD5
  
  b476424fda0dd5966d8eb339594ba727
- SHA1
  
  4c4b3ab8261f10ff753c36fd74089aca1785ed07
- SHA256
  
  c53ddfe0157451c6e24596fb023751ca1a9a785f38b992c6df7a8624916e423f
- SHA512
  
  679c3e5c394f4a4d1bea24614fb3ac81ccf93aa5f3be6f3b66ec8caf7826b94fce452b146a63d3b2fb7043fef382240f7e6b89bfd6befbbf79f9efe5033f540e
- SSDEEP
  
  12288:H8ie7D6oIfwpq4XCTayV5/C+FO2vHEduSeEQkbn76p0nadS3UCBiT9zfMKdAVdVT:H8iffil2tK+FUduSey7NGWU6Q2ZVdQA
Score

8^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2