729f5eaa32a32c519385af8d13296dbfbe6ee0786147affa1f4fa64022e1f28a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

156d30d3ac4d54ccb6dfb482290ca66a
Size

52KB
Sample

231230-l6wzpsghh9
MD5

156d30d3ac4d54ccb6dfb482290ca66a
SHA1

46ae95ea74726c5475666abe2d64d4d006fdddbc
SHA256

729f5eaa32a32c519385af8d13296dbfbe6ee0786147affa1f4fa64022e1f28a
SHA512

b1e2a2a6f3ed8c5edb63854cdffed716dbbabbb8972546318bee0b0733ab293590f60ec6fca1b4e7fd83892a65a805fe1f3b8cbe795974edd805677706beb062
SSDEEP

768:8CdBZndBNX5AW3vQwoKIyjylyj6x4Dz15H0TMcknpiqUvC/daF+7yEtf:80LAW3vZIFlyj6mPH0EptUqb7df

Score

7^/10

persistence upx

Malware Config

Targets

- Target
  
  156d30d3ac4d54ccb6dfb482290ca66a
- Size
  
  52KB
- MD5
  
  156d30d3ac4d54ccb6dfb482290ca66a
- SHA1
  
  46ae95ea74726c5475666abe2d64d4d006fdddbc
- SHA256
  
  729f5eaa32a32c519385af8d13296dbfbe6ee0786147affa1f4fa64022e1f28a
- SHA512
  
  b1e2a2a6f3ed8c5edb63854cdffed716dbbabbb8972546318bee0b0733ab293590f60ec6fca1b4e7fd83892a65a805fe1f3b8cbe795974edd805677706beb062
- SSDEEP
  
  768:8CdBZndBNX5AW3vQwoKIyjylyj6x4Dz15H0TMcknpiqUvC/daF+7yEtf:80LAW3vZIFlyj6mPH0EptUqb7df
Score

7^/10

persistence upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2