dfa2a0df7c22ad2151fe4966681210aab6d155e7a497b12647cef6336256ee3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2740ada6b396ca83bdcfeb465eb15ddb
Size

3.9MB
Sample

231231-eknb4sggd9
MD5

2740ada6b396ca83bdcfeb465eb15ddb
SHA1

cac585acfbe856292428673397eb48263b4e0312
SHA256

dfa2a0df7c22ad2151fe4966681210aab6d155e7a497b12647cef6336256ee3e
SHA512

15a28b7fb2ed6d8049efbec6c0d8853a278dc2a53dd9d1f101a637b08e7c483859a99957f09b2f2b99a0dee581295b841547bade0ebae75774075d8d77cafac7
SSDEEP

98304:JR/GJsFmD2i7D3xkOxYwpKe/geXpv1HD2i7D3xkOxYwpKAYyySomD2i7D3xkOxYr:JR/uh7FkNqKe4y5Zh7FkNqKAhyS/h7FC

Score

7^/10

upx

Malware Config

Targets

- Target
  
  2740ada6b396ca83bdcfeb465eb15ddb
- Size
  
  3.9MB
- MD5
  
  2740ada6b396ca83bdcfeb465eb15ddb
- SHA1
  
  cac585acfbe856292428673397eb48263b4e0312
- SHA256
  
  dfa2a0df7c22ad2151fe4966681210aab6d155e7a497b12647cef6336256ee3e
- SHA512
  
  15a28b7fb2ed6d8049efbec6c0d8853a278dc2a53dd9d1f101a637b08e7c483859a99957f09b2f2b99a0dee581295b841547bade0ebae75774075d8d77cafac7
- SSDEEP
  
  98304:JR/GJsFmD2i7D3xkOxYwpKe/geXpv1HD2i7D3xkOxYwpKAYyySomD2i7D3xkOxYr:JR/uh7FkNqKe4y5Zh7FkNqKAhyS/h7FC
Score

7^/10

upx
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2