ad23d1eadb5a5a8da028348fdf64998095dd2494285b494eeff9f8f13757f873 | Triage

Sharing

General

Target

ad23d1eadb5a5a8da028348fdf64998095dd2494285b494eeff9f8f13757f873
Size

749KB
Sample

221205-k6xessab6t
MD5

2b024b01271a674d3414f0833b11ca77
SHA1

bae6ef4931a7b5f7abda5d9bf8aacf00e40b7158
SHA256

ad23d1eadb5a5a8da028348fdf64998095dd2494285b494eeff9f8f13757f873
SHA512

61000599bb06bd627ff60fd899073eed09b63eeece28e75261794a37dad3f81f828a8303c47185abb2e20a2d233febcb6c474abcb76602ae912b5b642c1baa96
SSDEEP

12288:jHY4xWsRU6aIBcVG3ozlg+98XXfVN/Dm4Dlj32YPvJp5jvkA5Nk8OrWGK97Tl:84xhRqI6VG3mKM8XPVNDlTfP5jsA5N5J

Score

8^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  ad23d1eadb5a5a8da028348fdf64998095dd2494285b494eeff9f8f13757f873
- Size
  
  749KB
- MD5
  
  2b024b01271a674d3414f0833b11ca77
- SHA1
  
  bae6ef4931a7b5f7abda5d9bf8aacf00e40b7158
- SHA256
  
  ad23d1eadb5a5a8da028348fdf64998095dd2494285b494eeff9f8f13757f873
- SHA512
  
  61000599bb06bd627ff60fd899073eed09b63eeece28e75261794a37dad3f81f828a8303c47185abb2e20a2d233febcb6c474abcb76602ae912b5b642c1baa96
- SSDEEP
  
  12288:jHY4xWsRU6aIBcVG3ozlg+98XXfVN/Dm4Dlj32YPvJp5jvkA5Nk8OrWGK97Tl:84xhRqI6VG3mKM8XPVNDlTfP5jsA5N5J
Score

8^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2