6e9cdbc886ee673f1ba9ffa1e0b8d3ff608b250a3219e7931cb6e1638e950e09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e5022d18f377a58cc87296b5cae6ff0
Size

135KB
Sample

231225-valcrsbae9
MD5

2e5022d18f377a58cc87296b5cae6ff0
SHA1

63bf622cb083154c9b33f83d3067b88dc93b9c37
SHA256

6e9cdbc886ee673f1ba9ffa1e0b8d3ff608b250a3219e7931cb6e1638e950e09
SHA512

90e3441534ccb04cd5d0911dddb7cbc06b9e0c66ba48f0637fd1ebb8b390ace39c66b1342587e90db4f783194c204104ec51f399bbc6991373a24988f188ad35
SSDEEP

3072:RVsZPNU7WcdhYFekjwliMTs1tLtPVDC2VwAZE58D0N1By:RawWSuFhwEqsLZJVkyQzy

Score

10^/10

evasion persistence trojan upx

Malware Config

Targets

- Target
  
  2e5022d18f377a58cc87296b5cae6ff0
- Size
  
  135KB
- MD5
  
  2e5022d18f377a58cc87296b5cae6ff0
- SHA1
  
  63bf622cb083154c9b33f83d3067b88dc93b9c37
- SHA256
  
  6e9cdbc886ee673f1ba9ffa1e0b8d3ff608b250a3219e7931cb6e1638e950e09
- SHA512
  
  90e3441534ccb04cd5d0911dddb7cbc06b9e0c66ba48f0637fd1ebb8b390ace39c66b1342587e90db4f783194c204104ec51f399bbc6991373a24988f188ad35
- SSDEEP
  
  3072:RVsZPNU7WcdhYFekjwliMTs1tLtPVDC2VwAZE58D0N1By:RawWSuFhwEqsLZJVkyQzy
Score

10^/10

evasion persistence trojan upx
- UAC bypass
  evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojanupx

behavioral2