e29fc34b3cc1ac7e22049d6233aed31e83e763ec7f0d271055c2be67afb6a0a0 | Triage

Sharing

General

Target

e29fc34b3cc1ac7e22049d6233aed31e83e763ec7f0d271055c2be67afb6a0a0
Size

367KB
Sample

221204-qxxxvsha8y
MD5

f37f31f8620c0a2ac54c9ad2f6a39f5a
SHA1

b1dc2aedfb25b63f7ad53dc605605fd3112def75
SHA256

e29fc34b3cc1ac7e22049d6233aed31e83e763ec7f0d271055c2be67afb6a0a0
SHA512

16dc8686812168b9ead551911c33dc6d46f0218c5b3765571dde56793b7e1651d59abac0ddd57b69ec4593200a8b6576d16b57ad0d1ef02affddb94aa67980b1
SSDEEP

6144:E6TPfhk3Nbf3b2AlVD3TJvyLlXLjnN9wlnV/DsoM67XXz48TY7EE29X4L1n+1vzN:EIfQNbfL22HADN+lV/Yo5344YIkn+JSE

Score

10^/10

persistence upx

Malware Config

Targets

- Target
  
  e29fc34b3cc1ac7e22049d6233aed31e83e763ec7f0d271055c2be67afb6a0a0
- Size
  
  367KB
- MD5
  
  f37f31f8620c0a2ac54c9ad2f6a39f5a
- SHA1
  
  b1dc2aedfb25b63f7ad53dc605605fd3112def75
- SHA256
  
  e29fc34b3cc1ac7e22049d6233aed31e83e763ec7f0d271055c2be67afb6a0a0
- SHA512
  
  16dc8686812168b9ead551911c33dc6d46f0218c5b3765571dde56793b7e1651d59abac0ddd57b69ec4593200a8b6576d16b57ad0d1ef02affddb94aa67980b1
- SSDEEP
  
  6144:E6TPfhk3Nbf3b2AlVD3TJvyLlXLjnN9wlnV/DsoM67XXz48TY7EE29X4L1n+1vzN:EIfQNbfL22HADN+lV/Yo5344YIkn+JSE
Score

10^/10

persistence upx
- Modifies WinLogon for persistence
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2