8ee5c877ba55880abfd78984b30020a996f96282de111586c9d1cc3eefa3d964 | Triage

Sharing

General

Target

8ee5c877ba55880abfd78984b30020a996f96282de111586c9d1cc3eefa3d964
Size

260KB
Sample

221205-p1x7cseh2x
MD5

b8307333e82caa858e63d79354ee7fa3
SHA1

be851c158eb016d0055355eba179ca19aadf9fbd
SHA256

8ee5c877ba55880abfd78984b30020a996f96282de111586c9d1cc3eefa3d964
SHA512

9f3748915ad66ea6dd52a60fd59c7672a60b305a7e31d179bb0993fc7b4a6d0da06ea7b37e71d1e3b8a657355ae1fa72990d70fd22393564686a79d480d80b3e
SSDEEP

6144:tiuqIVxZG1xrJC5LeTMEDEHOGpZw9GasNg1ToSOy8Rzc51uil:tiuqIVsNC5LpRnaTTROjZ3

Score

8^/10

persistence upx

Malware Config

Targets

- Target
  
  8ee5c877ba55880abfd78984b30020a996f96282de111586c9d1cc3eefa3d964
- Size
  
  260KB
- MD5
  
  b8307333e82caa858e63d79354ee7fa3
- SHA1
  
  be851c158eb016d0055355eba179ca19aadf9fbd
- SHA256
  
  8ee5c877ba55880abfd78984b30020a996f96282de111586c9d1cc3eefa3d964
- SHA512
  
  9f3748915ad66ea6dd52a60fd59c7672a60b305a7e31d179bb0993fc7b4a6d0da06ea7b37e71d1e3b8a657355ae1fa72990d70fd22393564686a79d480d80b3e
- SSDEEP
  
  6144:tiuqIVxZG1xrJC5LeTMEDEHOGpZw9GasNg1ToSOy8Rzc51uil:tiuqIVsNC5LpRnaTTROjZ3
Score

8^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2