e893e0e97b2cfbf7eb6be3c27871ada97155d5c331c9b25b84aa44c65a461f25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e893e0e97b2cfbf7eb6be3c27871ada97155d5c331c9b25b84aa44c65a461f25
Size

93KB
Sample

221206-pqrltshb87
MD5

e5b2b9e3dcc45c6e332635dbf9b29b42
SHA1

26dd9648239a4fc1910269a1c7aa6c50056da1ea
SHA256

e893e0e97b2cfbf7eb6be3c27871ada97155d5c331c9b25b84aa44c65a461f25
SHA512

2e715c304a8fbb5b3ce6417736bc4944ed5aae0d99d04e86487f6a236eda22fafe1363fb4876eaf4b565311814eba09a47a476fe53964ee988611889d2880a21
SSDEEP

1536:WGQk7qv7ZWJbO2XWF56GZXao0QidxEQY1ZxJZ2Y3YP0T8qmadVTFrhJVAmVdnout:jHQdWg2XWFoyXao0Qi4B1ZsS8XaZhIqP

Score

8^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  e893e0e97b2cfbf7eb6be3c27871ada97155d5c331c9b25b84aa44c65a461f25
- Size
  
  93KB
- MD5
  
  e5b2b9e3dcc45c6e332635dbf9b29b42
- SHA1
  
  26dd9648239a4fc1910269a1c7aa6c50056da1ea
- SHA256
  
  e893e0e97b2cfbf7eb6be3c27871ada97155d5c331c9b25b84aa44c65a461f25
- SHA512
  
  2e715c304a8fbb5b3ce6417736bc4944ed5aae0d99d04e86487f6a236eda22fafe1363fb4876eaf4b565311814eba09a47a476fe53964ee988611889d2880a21
- SSDEEP
  
  1536:WGQk7qv7ZWJbO2XWF56GZXao0QidxEQY1ZxJZ2Y3YP0T8qmadVTFrhJVAmVdnout:jHQdWg2XWFoyXao0Qi4B1ZsS8XaZhIqP
Score

8^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx