cacb7d3663b14081bd6506deae9a876ea777f05e7b1ce342c0143040b60c070d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cacb7d3663b14081bd6506deae9a876ea777f05e7b1ce342c0143040b60c070d
Size

828KB
Sample

221203-qcm7xsfh9t
MD5

9995bd4e44d3c5dac84209962dd8937a
SHA1

95c2ace8390575b29a1d6799da3e8d81a2ec6501
SHA256

cacb7d3663b14081bd6506deae9a876ea777f05e7b1ce342c0143040b60c070d
SHA512

7b70afae6d7463ac4abb7a13fe0a7f0bbaa2996b7cdd84ce329b213d58e12b1219df8c3029cb949f78c19f32529192ce0841581f6a448202e55e3f3a07c30e0d
SSDEEP

12288:F8WcIw+FS57yvHiKEXP8Wf0VjGtBDDbFBrJjCw94QVGouNe/NzLKQ9v14eLU8t/e:u18FtPM8W8VjYjXhCI4holNPnL/K+

Score

8^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  cacb7d3663b14081bd6506deae9a876ea777f05e7b1ce342c0143040b60c070d
- Size
  
  828KB
- MD5
  
  9995bd4e44d3c5dac84209962dd8937a
- SHA1
  
  95c2ace8390575b29a1d6799da3e8d81a2ec6501
- SHA256
  
  cacb7d3663b14081bd6506deae9a876ea777f05e7b1ce342c0143040b60c070d
- SHA512
  
  7b70afae6d7463ac4abb7a13fe0a7f0bbaa2996b7cdd84ce329b213d58e12b1219df8c3029cb949f78c19f32529192ce0841581f6a448202e55e3f3a07c30e0d
- SSDEEP
  
  12288:F8WcIw+FS57yvHiKEXP8Wf0VjGtBDDbFBrJjCw94QVGouNe/NzLKQ9v14eLU8t/e:u18FtPM8W8VjYjXhCI4holNPnL/K+
Score

8^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2