a368ef746ea877c16c74442d00addec740a307180f79a93584c0914f832da7b3 | Triage

Submit
Reports

Overview

overview

Static

static

3

a368ef746e...b3.exe

windows7-x64

a368ef746e...b3.exe

windows10-2004-x64

Sharing

General

Target

a368ef746ea877c16c74442d00addec740a307180f79a93584c0914f832da7b3
Size

23KB
Sample

240424-x35cfsfg6y
MD5

32faaab6ecfb99dd9c71de428b6b40aa
SHA1

a98e413b34e92e2f0a14b5f5357b22f147dd7085
SHA256

a368ef746ea877c16c74442d00addec740a307180f79a93584c0914f832da7b3
SHA512

ecb78fe6761dd5488829f53ccb4f98c18a8ce2a4743d1b92be67dbc03dba2e4adadc7779d913edcd9b944d36d6eb5508788528e6bbb168e2010d04079f0667b0
SSDEEP

384:jIz4hfUHXqhxLjPBOqxV4DUjBdZzqGgdV0SWWvbV38CRt6CbFurb9cfMHsvA:jIUhfMX4ljI8V4DQhq9dV0SxvbV3j6CK

Score

10^/10

evasion persistence trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

a368ef746ea877c16c74442d00addec740a307180f79a93584c0914f832da7b3.exe

Resource

win7-20240221-en

evasion persistence trojan upx

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

a368ef746ea877c16c74442d00addec740a307180f79a93584c0914f832da7b3.exe

Resource

win10v2004-20240226-en

evasion persistence trojan upx

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  a368ef746ea877c16c74442d00addec740a307180f79a93584c0914f832da7b3
- Size
  
  23KB
- MD5
  
  32faaab6ecfb99dd9c71de428b6b40aa
- SHA1
  
  a98e413b34e92e2f0a14b5f5357b22f147dd7085
- SHA256
  
  a368ef746ea877c16c74442d00addec740a307180f79a93584c0914f832da7b3
- SHA512
  
  ecb78fe6761dd5488829f53ccb4f98c18a8ce2a4743d1b92be67dbc03dba2e4adadc7779d913edcd9b944d36d6eb5508788528e6bbb168e2010d04079f0667b0
- SSDEEP
  
  384:jIz4hfUHXqhxLjPBOqxV4DUjBdZzqGgdV0SWWvbV38CRt6CbFurb9cfMHsvA:jIUhfMX4ljI8V4DQhq9dV0SxvbV3j6CK
Score

10^/10

evasion persistence trojan upx
- Windows security bypass
  evasion trojan
- Drops file in Drivers directory
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojanupx

behavioral2

evasionpersistencetrojanupx

© 2018-2025

Terms | Privacy