c2cca59e18aaa63920010efd55cc5513feb2058e35402c9842da000efde57a0d | Triage

Sharing

General

Target

ae1724e6fcbfef51bf991d883c77c3a1
Size

434KB
Sample

240229-jzv3qabd28
MD5

ae1724e6fcbfef51bf991d883c77c3a1
SHA1

0c043e93bed4a263a2c0ca479d7d3945b7a4cc3e
SHA256

c2cca59e18aaa63920010efd55cc5513feb2058e35402c9842da000efde57a0d
SHA512

039cf08ebaa3e66a90c47875cef803842d07d5e36a1e87ee9c9492f637a8fad8e4f0f19f2faf3c95fb376e4659a8b4535a4d084b6ef20e98ee84e78381f6f97d
SSDEEP

12288:7GhTmO6ecJSn8zId5oSLtKHt16wOAJFkya3S:7GhaxZJ+8sLtKN1bDJFkym

Score

8^/10

evasion persistence upx

Malware Config

Targets

- Target
  
  ae1724e6fcbfef51bf991d883c77c3a1
- Size
  
  434KB
- MD5
  
  ae1724e6fcbfef51bf991d883c77c3a1
- SHA1
  
  0c043e93bed4a263a2c0ca479d7d3945b7a4cc3e
- SHA256
  
  c2cca59e18aaa63920010efd55cc5513feb2058e35402c9842da000efde57a0d
- SHA512
  
  039cf08ebaa3e66a90c47875cef803842d07d5e36a1e87ee9c9492f637a8fad8e4f0f19f2faf3c95fb376e4659a8b4535a4d084b6ef20e98ee84e78381f6f97d
- SSDEEP
  
  12288:7GhTmO6ecJSn8zId5oSLtKHt16wOAJFkya3S:7GhaxZJ+8sLtKN1bDJFkym
Score

8^/10

evasion persistence upx
- Disables Task Manager via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2