5a1d53517410c7a62586884fdf6b0fe093ad584371afa14cf85f6b46b9dccf3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c2aba81c44f382099b969da3a8aac4d
Size

523KB
Sample

231225-zjmz6sbbcn
MD5

3c2aba81c44f382099b969da3a8aac4d
SHA1

00bf01305133324e41d0ebe61e4131cc0d16dd6b
SHA256

5a1d53517410c7a62586884fdf6b0fe093ad584371afa14cf85f6b46b9dccf3e
SHA512

ec047463d1cdf16775070d9f96764f811f649512f52d95c06319af3032872335fa902b0f9f2627aad5a17dd3a4016a61c6b84558029dc7347922b82e429d9e65
SSDEEP

12288:dco6Ow7XzQmodZ/09D0WWJfow9c81ZyKv1dcJGdMFL1KJIdIZ:qDtURmD05JgmcgJYmMFi

Score

7^/10

persistence upx

Malware Config

Targets

- Target
  
  3c2aba81c44f382099b969da3a8aac4d
- Size
  
  523KB
- MD5
  
  3c2aba81c44f382099b969da3a8aac4d
- SHA1
  
  00bf01305133324e41d0ebe61e4131cc0d16dd6b
- SHA256
  
  5a1d53517410c7a62586884fdf6b0fe093ad584371afa14cf85f6b46b9dccf3e
- SHA512
  
  ec047463d1cdf16775070d9f96764f811f649512f52d95c06319af3032872335fa902b0f9f2627aad5a17dd3a4016a61c6b84558029dc7347922b82e429d9e65
- SSDEEP
  
  12288:dco6Ow7XzQmodZ/09D0WWJfow9c81ZyKv1dcJGdMFL1KJIdIZ:qDtURmD05JgmcgJYmMFi
Score

7^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2