c8f85f0f5ea1105e88df6bf2b77c80ed9971af9c47d58c96566fbdb08d883033 | Triage

Sharing

General

Target

9516e821cbac3a3c46fa6de3143eb7c9
Size

37KB
Sample

240206-v7yz5adhdq
MD5

9516e821cbac3a3c46fa6de3143eb7c9
SHA1

c987a6433441f3a0258d25da6183752496624e58
SHA256

c8f85f0f5ea1105e88df6bf2b77c80ed9971af9c47d58c96566fbdb08d883033
SHA512

1400ebcc1e1fda3622f114fba2079185b8c4bf7d27dc00eb6bd8f78400783ffe575b2408f804682b5c34f970ce599617000b79509dc541fdcc4841a9a13a041b
SSDEEP

768:QlbdBEcYRNzNBMl8BjWsYs02PrEi+nt6SYDhNa:adBYIl8BqW+nt6Sga

Score

10^/10

persistence upx

Malware Config

Targets

- Target
  
  9516e821cbac3a3c46fa6de3143eb7c9
- Size
  
  37KB
- MD5
  
  9516e821cbac3a3c46fa6de3143eb7c9
- SHA1
  
  c987a6433441f3a0258d25da6183752496624e58
- SHA256
  
  c8f85f0f5ea1105e88df6bf2b77c80ed9971af9c47d58c96566fbdb08d883033
- SHA512
  
  1400ebcc1e1fda3622f114fba2079185b8c4bf7d27dc00eb6bd8f78400783ffe575b2408f804682b5c34f970ce599617000b79509dc541fdcc4841a9a13a041b
- SSDEEP
  
  768:QlbdBEcYRNzNBMl8BjWsYs02PrEi+nt6SYDhNa:adBYIl8BqW+nt6Sga
Score

10^/10

persistence upx
- Modifies WinLogon for persistence
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2