a1d009cd22065bf5582920e7b71fa30b35959d09dc13721803b5045ba43da5aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29d508d35c01bb3ee3f68c4bc809b4f4
Size

8KB
Sample

231231-f2wkgsegh6
MD5

29d508d35c01bb3ee3f68c4bc809b4f4
SHA1

6311451cf15dd243c392bc48d5710e4ad7eb4b9a
SHA256

a1d009cd22065bf5582920e7b71fa30b35959d09dc13721803b5045ba43da5aa
SHA512

397c9cad36f0325f48e4a20ac805090dd08cc3026e6342fd540f4316a906d574097723f85c24f2dab28cb1f0e42786fcae60d6940052da4208e733a2a6fcc0be
SSDEEP

192:t5XJli7IFHH2pO9zHtDjvIFaNJhLkwcud2DH9VwGfcthxQUvvR:tKIFn2WN38aNJawcudoD7UnaUR

Score

8^/10

evasion persistence upx

Malware Config

Targets

- Target
  
  29d508d35c01bb3ee3f68c4bc809b4f4
- Size
  
  8KB
- MD5
  
  29d508d35c01bb3ee3f68c4bc809b4f4
- SHA1
  
  6311451cf15dd243c392bc48d5710e4ad7eb4b9a
- SHA256
  
  a1d009cd22065bf5582920e7b71fa30b35959d09dc13721803b5045ba43da5aa
- SHA512
  
  397c9cad36f0325f48e4a20ac805090dd08cc3026e6342fd540f4316a906d574097723f85c24f2dab28cb1f0e42786fcae60d6940052da4208e733a2a6fcc0be
- SSDEEP
  
  192:t5XJli7IFHH2pO9zHtDjvIFaNJhLkwcud2DH9VwGfcthxQUvvR:tKIFn2WN38aNJawcudoD7UnaUR
Score

8^/10

evasion persistence upx
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2