3487e8511c01c1858935a5bbd1a7bd7b903e1e339696fa5c1705b5c2175814e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0accfa1744a5eba1cff2a8c8f5769eeb
Size

50KB
Sample

231230-cb4xdseggp
MD5

0accfa1744a5eba1cff2a8c8f5769eeb
SHA1

46138b6588b92b86a6299443e2fb61eb972ca695
SHA256

3487e8511c01c1858935a5bbd1a7bd7b903e1e339696fa5c1705b5c2175814e9
SHA512

d9c6e7b639e8dbe61a66d22450fdf320f4c6910103d145852ea9779daf1a731ceb1c9ba9785b18d9b337b91835e9398c77a1298c5e4ec8862014b8cfa3928511
SSDEEP

1536:3vQ5F+U+337lxJpKE5gJLcxB3pwEidGkq5:345kU+Zpz54wtOEmNq5

Score

7^/10

persistence upx

Malware Config

Targets

- Target
  
  0accfa1744a5eba1cff2a8c8f5769eeb
- Size
  
  50KB
- MD5
  
  0accfa1744a5eba1cff2a8c8f5769eeb
- SHA1
  
  46138b6588b92b86a6299443e2fb61eb972ca695
- SHA256
  
  3487e8511c01c1858935a5bbd1a7bd7b903e1e339696fa5c1705b5c2175814e9
- SHA512
  
  d9c6e7b639e8dbe61a66d22450fdf320f4c6910103d145852ea9779daf1a731ceb1c9ba9785b18d9b337b91835e9398c77a1298c5e4ec8862014b8cfa3928511
- SSDEEP
  
  1536:3vQ5F+U+337lxJpKE5gJLcxB3pwEidGkq5:345kU+Zpz54wtOEmNq5
Score

7^/10

persistence upx
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2