cab071538bdb2266aaf086dee05b461558d69c64465432444c48f219d430af5d | Triage

Sharing

General

Target

75fea9f69c41e1ceaeb74d088dbcdc5a
Size

7KB
Sample

240126-bk2b7abbf8
MD5

75fea9f69c41e1ceaeb74d088dbcdc5a
SHA1

8aba64bb9a5906dcde063323514171f4291f0d31
SHA256

cab071538bdb2266aaf086dee05b461558d69c64465432444c48f219d430af5d
SHA512

88f1f3c0786ec9b62ff3ff7827b4dcd75cf3ca490b8727a9226cc7773595b5a75ace8ec0ebe3720def74f88dcbcd47a4a6bfa57fc0dab55bdd73ecefd91f5b75
SSDEEP

192:8Y33nqUZn7OcXTVK5/fEgU3ud+iCX59deQD:8Y33qi7Fg1X5d+i85ft

Score

8^/10

evasion persistence upx

Malware Config

Targets

- Target
  
  75fea9f69c41e1ceaeb74d088dbcdc5a
- Size
  
  7KB
- MD5
  
  75fea9f69c41e1ceaeb74d088dbcdc5a
- SHA1
  
  8aba64bb9a5906dcde063323514171f4291f0d31
- SHA256
  
  cab071538bdb2266aaf086dee05b461558d69c64465432444c48f219d430af5d
- SHA512
  
  88f1f3c0786ec9b62ff3ff7827b4dcd75cf3ca490b8727a9226cc7773595b5a75ace8ec0ebe3720def74f88dcbcd47a4a6bfa57fc0dab55bdd73ecefd91f5b75
- SSDEEP
  
  192:8Y33nqUZn7OcXTVK5/fEgU3ud+iCX59deQD:8Y33qi7Fg1X5d+i85ft
Score

8^/10

evasion persistence upx
- Disables Task Manager via registry modification
  evasion
- Modifies Windows Firewall
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2

evasionpersistenceupx