5a12f278ee6012e3cbea77b08b5f1464cb6efa3b62973ef6bd8c5e99855fa5f1 | Triage

Submit
Reports

Overview

overview

Static

static

3

24a319fcbf...c0.exe

windows7-x64

24a319fcbf...c0.exe

windows10-2004-x64

Sharing

General

Target

24a319fcbf79f0d9139360f9cb7597c0
Size

264KB
Sample

231225-rkgwjshfa6
MD5

24a319fcbf79f0d9139360f9cb7597c0
SHA1

d7c4f9653a43ebac593f83a3ae81c4bd0f10f20c
SHA256

5a12f278ee6012e3cbea77b08b5f1464cb6efa3b62973ef6bd8c5e99855fa5f1
SHA512

ffa6fbedf62178ca2e65d1ee740c524154bf71860ea7ff1c539d50935410d2c67c40e7565cf114a2c6428c78deb53c6e824931d8b109885e5555498e467c3b5e
SSDEEP

6144:qyYQ+Xjo57gHJ88xmeMZuQZFSP2Oix7+0iob5rEUo5XBzwNhrr2amwrexYm7xiBa:qXQM0clEFZuCFSvix7+0ffyRUNhrgwqr

Score

10^/10

evasion persistence upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

24a319fcbf79f0d9139360f9cb7597c0.exe

Resource

win7-20231215-en

evasion persistence upx

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

24a319fcbf79f0d9139360f9cb7597c0.exe

Resource

win10v2004-20231215-en

evasion persistence upx

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  24a319fcbf79f0d9139360f9cb7597c0
- Size
  
  264KB
- MD5
  
  24a319fcbf79f0d9139360f9cb7597c0
- SHA1
  
  d7c4f9653a43ebac593f83a3ae81c4bd0f10f20c
- SHA256
  
  5a12f278ee6012e3cbea77b08b5f1464cb6efa3b62973ef6bd8c5e99855fa5f1
- SHA512
  
  ffa6fbedf62178ca2e65d1ee740c524154bf71860ea7ff1c539d50935410d2c67c40e7565cf114a2c6428c78deb53c6e824931d8b109885e5555498e467c3b5e
- SSDEEP
  
  6144:qyYQ+Xjo57gHJ88xmeMZuQZFSP2Oix7+0iob5rEUo5XBzwNhrr2amwrexYm7xiBa:qXQM0clEFZuCFSvix7+0ffyRUNhrgwqr
Score

10^/10

evasion persistence upx
- Modifies firewall policy service
  evasion
- Adds policy Run key to start application
  persistence
- Modifies Installed Components in the registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2

evasionpersistenceupx

© 2018-2025

Terms | Privacy