e82693b6585d9b0b7b81b731897cc873b585f22b4e4991a3d07ddd1652261f31 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48ab2f8453be371c03cc66a2afbb1131
Size

415KB
Sample

240107-lzb1ysaehn
MD5

48ab2f8453be371c03cc66a2afbb1131
SHA1

426ea244f4213a76cc97060d2911053896e40c3a
SHA256

e82693b6585d9b0b7b81b731897cc873b585f22b4e4991a3d07ddd1652261f31
SHA512

386317fe97837ae3196bc10366f32d9e251a999f9aa0fb6f1349db861deecb5c408b50120cc624480a95213cee4ea09daa3e2c15e2f571d51bedb8a399f2e485
SSDEEP

12288:Va9C4Qeb3m9k+L3hH+WfFbEc0UtFDTM2:ViGeK9k+LkebSw42

Score

8^/10

evasion persistence upx

Malware Config

Targets

- Target
  
  48ab2f8453be371c03cc66a2afbb1131
- Size
  
  415KB
- MD5
  
  48ab2f8453be371c03cc66a2afbb1131
- SHA1
  
  426ea244f4213a76cc97060d2911053896e40c3a
- SHA256
  
  e82693b6585d9b0b7b81b731897cc873b585f22b4e4991a3d07ddd1652261f31
- SHA512
  
  386317fe97837ae3196bc10366f32d9e251a999f9aa0fb6f1349db861deecb5c408b50120cc624480a95213cee4ea09daa3e2c15e2f571d51bedb8a399f2e485
- SSDEEP
  
  12288:Va9C4Qeb3m9k+L3hH+WfFbEc0UtFDTM2:ViGeK9k+LkebSw42
Score

8^/10

evasion persistence upx
- Disables Task Manager via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2