50dbc6f2cdd5dbdf391a1ebe96023e305cfe64591cd457859cbf5296be4ce624 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04cb94f8d080736177003426a336e73a
Size

154KB
Sample

231229-1m1acagcdk
MD5

04cb94f8d080736177003426a336e73a
SHA1

1e6d9ca37d10297d80fe86793d7913b1e0c3c6ec
SHA256

50dbc6f2cdd5dbdf391a1ebe96023e305cfe64591cd457859cbf5296be4ce624
SHA512

4e44e5e3685fccd2965ff1435cc09498f97bb67ee76128ac423b12fac28cf7248ccb106591245b7ba346a0f08e5ad7c7ce55d0cf5203de8c63ecfa3b3684a083
SSDEEP

3072:faSZDyMM6Gqgcou7+J/a83z8+lzukia7Ll/2fDbvdClWjwSV/ZTeY:faAnD7CXZlhFqDbvYAz

Score

8^/10

evasion persistence upx

Malware Config

Targets

- Target
  
  04cb94f8d080736177003426a336e73a
- Size
  
  154KB
- MD5
  
  04cb94f8d080736177003426a336e73a
- SHA1
  
  1e6d9ca37d10297d80fe86793d7913b1e0c3c6ec
- SHA256
  
  50dbc6f2cdd5dbdf391a1ebe96023e305cfe64591cd457859cbf5296be4ce624
- SHA512
  
  4e44e5e3685fccd2965ff1435cc09498f97bb67ee76128ac423b12fac28cf7248ccb106591245b7ba346a0f08e5ad7c7ce55d0cf5203de8c63ecfa3b3684a083
- SSDEEP
  
  3072:faSZDyMM6Gqgcou7+J/a83z8+lzukia7Ll/2fDbvdClWjwSV/ZTeY:faAnD7CXZlhFqDbvYAz
Score

8^/10

evasion persistence upx
- Modifies Windows Firewall
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2

evasionpersistenceupx