417b9e7c877d3e5f9c7c366008576707e8fdab07430eefdfb50d3dbb1f7cd207 | Triage

Sharing

General

Target

417b9e7c877d3e5f9c7c366008576707e8fdab07430eefdfb50d3dbb1f7cd207
Size

91KB
Sample

240309-1tmmtsbg55
MD5

6fc84a659a22275001556f54fe157645
SHA1

44ee8db707b2a59e1f2c852b347d24c0e504db09
SHA256

417b9e7c877d3e5f9c7c366008576707e8fdab07430eefdfb50d3dbb1f7cd207
SHA512

4a9d8f6e34c0aaed29b2a1a36029a6135ad8e40b499692228986045b89da02b79bb9c8ded801ccdbe3596c9eb9f5bd5c908907a6fb8081bda7bef016f1bd633e
SSDEEP

1536:y4QQ6NSyM61l19piO+LV8YEoI/EU9RUe4mvWMTtl13A+CpYtW6NUWKINX:y4X6NSyfnpijeYEoIcq4GWSFAbp8NUW7

Score

7^/10

persistence upx

Malware Config

Targets

- Target
  
  417b9e7c877d3e5f9c7c366008576707e8fdab07430eefdfb50d3dbb1f7cd207
- Size
  
  91KB
- MD5
  
  6fc84a659a22275001556f54fe157645
- SHA1
  
  44ee8db707b2a59e1f2c852b347d24c0e504db09
- SHA256
  
  417b9e7c877d3e5f9c7c366008576707e8fdab07430eefdfb50d3dbb1f7cd207
- SHA512
  
  4a9d8f6e34c0aaed29b2a1a36029a6135ad8e40b499692228986045b89da02b79bb9c8ded801ccdbe3596c9eb9f5bd5c908907a6fb8081bda7bef016f1bd633e
- SSDEEP
  
  1536:y4QQ6NSyM61l19piO+LV8YEoI/EU9RUe4mvWMTtl13A+CpYtW6NUWKINX:y4X6NSyfnpijeYEoIcq4GWSFAbp8NUW7
Score

7^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2