08089429ee4231d39dd0f2c970dca60e09a72e6c003f480f2dad76b032fdc1cf

Target

08089429ee4231d39dd0f2c970dca60e09a72e6c003f480f2dad76b032fdc1cf
Size

1.9MB
Sample

240415-q61p4sfh83
MD5

0b559ca054356534e07322d4cd00a351
SHA1

e5be9a86c3da0a25a15bad5b06390cae4f71610a
SHA256

08089429ee4231d39dd0f2c970dca60e09a72e6c003f480f2dad76b032fdc1cf
SHA512

82438431578bd37381632f2e330c600d17344a16dcf63b0df49887c964ec7565ee840fc2f98405982eefb21f6abaa111562b8950033fad389345b5069bd5e047
SSDEEP

49152:POwglWgEBHGKCSbMCAvxDM82UCYaLb+NLytJD8W4EfzaFb:POTlWHtAvO82U0LKNeEuz

Score

7^/10

persistence upx

Malware Config

Targets

- Target
  
  08089429ee4231d39dd0f2c970dca60e09a72e6c003f480f2dad76b032fdc1cf
- Size
  
  1.9MB
- MD5
  
  0b559ca054356534e07322d4cd00a351
- SHA1
  
  e5be9a86c3da0a25a15bad5b06390cae4f71610a
- SHA256
  
  08089429ee4231d39dd0f2c970dca60e09a72e6c003f480f2dad76b032fdc1cf
- SHA512
  
  82438431578bd37381632f2e330c600d17344a16dcf63b0df49887c964ec7565ee840fc2f98405982eefb21f6abaa111562b8950033fad389345b5069bd5e047
- SSDEEP
  
  49152:POwglWgEBHGKCSbMCAvxDM82UCYaLb+NLytJD8W4EfzaFb:POTlWHtAvO82U0LKNeEuz
Score

7^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

UPX packed file

Unexpected DNS network traffic destination

Adds Run key to start application

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4