fe35fea31e2f014501f14a1c601dc82e59c2b3edfbb602b1ee22d1d3bba998da | Triage

Submit
Reports

Overview

overview

Static

static

8

fe35fea31e...da.exe

windows7-x64

8

fe35fea31e...da.exe

windows10-2004-x64

Sharing

General

Target

fe35fea31e2f014501f14a1c601dc82e59c2b3edfbb602b1ee22d1d3bba998da
Size

483KB
Sample

221202-3g8ewaec66
MD5

de0e986041e4e5c937919ab3da97880e
SHA1

944c73aa5f971466b813151e88cf06847c49a087
SHA256

fe35fea31e2f014501f14a1c601dc82e59c2b3edfbb602b1ee22d1d3bba998da
SHA512

31e550dada3a6fea46c89942301d55fe063809c91d068accf13124c11a44f2b583c27c29e5766099a5f6d9f63420ac85accf6d09afecab7925d3de1b0854f224
SSDEEP

6144:KTnjnvrM3mjHGh5Doh9Z5cAea4Jv81E6IfgcRV++lSANGiokPiL39Q5MNjrPwP:KHn438Hwerea2vEEF/JwNQgy

Score

10^/10

evasion persistence trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

fe35fea31e2f014501f14a1c601dc82e59c2b3edfbb602b1ee22d1d3bba998da.exe

Resource

win7-20220812-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

fe35fea31e2f014501f14a1c601dc82e59c2b3edfbb602b1ee22d1d3bba998da.exe

Resource

win10v2004-20221111-en

evasion persistence trojan upx

windows10-2004-x64

15 signatures

150 seconds

Malware Config

Targets

- Target
  
  fe35fea31e2f014501f14a1c601dc82e59c2b3edfbb602b1ee22d1d3bba998da
- Size
  
  483KB
- MD5
  
  de0e986041e4e5c937919ab3da97880e
- SHA1
  
  944c73aa5f971466b813151e88cf06847c49a087
- SHA256
  
  fe35fea31e2f014501f14a1c601dc82e59c2b3edfbb602b1ee22d1d3bba998da
- SHA512
  
  31e550dada3a6fea46c89942301d55fe063809c91d068accf13124c11a44f2b583c27c29e5766099a5f6d9f63420ac85accf6d09afecab7925d3de1b0854f224
- SSDEEP
  
  6144:KTnjnvrM3mjHGh5Doh9Z5cAea4Jv81E6IfgcRV++lSANGiokPiL39Q5MNjrPwP:KHn438Hwerea2vEEF/JwNQgy
Score

10^/10

upx evasion persistence trojan
- Modifies WinLogon for persistence
  persistence
- UAC bypass
  evasion trojan
- Disables RegEdit via registry modification
  evasion
- Disables Task Manager via registry modification
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasionpersistencetrojanupx

© 2018-2025

Terms | Privacy