856d777cd1a661ee404f45a9e84b107315eebe660110e69a0c2bea203be71442 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4722d2f97702c2661b91c5765bc2cf0c
Size

1.5MB
Sample

240106-zgwvashaf2
MD5

4722d2f97702c2661b91c5765bc2cf0c
SHA1

f2c02ba410c46ae5a4d131c6ba1db99fcf4c7b95
SHA256

856d777cd1a661ee404f45a9e84b107315eebe660110e69a0c2bea203be71442
SHA512

2b22c5e4a7dcd1459a592c328ceb07fe4b50a86dfc44ff83f574e60aaf1b4a8e9aeda374146a47842ff06196fef2d08ad4c3de07d7e85446b5f17d9bd3204050
SSDEEP

24576:QnsP5FTw6GlqlkqC3CJihExIjTwQLyhWveB+4goGQoadai7D3uITjIFOxo53ApIj:QnsPLTw6CqqqCUihExIjTwQLyhWveB+Z

Score

7^/10

upx

Malware Config

Targets

- Target
  
  4722d2f97702c2661b91c5765bc2cf0c
- Size
  
  1.5MB
- MD5
  
  4722d2f97702c2661b91c5765bc2cf0c
- SHA1
  
  f2c02ba410c46ae5a4d131c6ba1db99fcf4c7b95
- SHA256
  
  856d777cd1a661ee404f45a9e84b107315eebe660110e69a0c2bea203be71442
- SHA512
  
  2b22c5e4a7dcd1459a592c328ceb07fe4b50a86dfc44ff83f574e60aaf1b4a8e9aeda374146a47842ff06196fef2d08ad4c3de07d7e85446b5f17d9bd3204050
- SSDEEP
  
  24576:QnsP5FTw6GlqlkqC3CJihExIjTwQLyhWveB+4goGQoadai7D3uITjIFOxo53ApIj:QnsPLTw6CqqqCUihExIjTwQLyhWveB+Z
Score

7^/10

upx
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2