7b8df1e07bd10d0ef2678749ad73392cee7b264ce4810936d70b89db75acb8a4 | Triage

Submit
Reports

Overview

overview

Static

static

7

7b8df1e07b...a4.exe

windows7-x64

7b8df1e07b...a4.exe

windows10-2004-x64

Sharing

General

Target

7b8df1e07bd10d0ef2678749ad73392cee7b264ce4810936d70b89db75acb8a4
Size

22KB
Sample

240430-3xrgasba2t
MD5

842108f1e17b6f54d7e243ab26210801
SHA1

37cf3f56e2d5d0a2b091d5f180d4e0a89f5c0428
SHA256

7b8df1e07bd10d0ef2678749ad73392cee7b264ce4810936d70b89db75acb8a4
SHA512

f7b90da38256b04b1f6b950a206732994662fea9accb1851b45d51f5cf16ee217411b3e7ae67762cb6aef134a2d556ea39c34d03fe2a10997f30210aeafdda18
SSDEEP

384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvXVB787v:rRkiLw3HsDSARGG/r87v

Score

10^/10

evasion persistence trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

7b8df1e07bd10d0ef2678749ad73392cee7b264ce4810936d70b89db75acb8a4.exe

Resource

win7-20240221-en

evasion persistence trojan upx

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

7b8df1e07bd10d0ef2678749ad73392cee7b264ce4810936d70b89db75acb8a4.exe

Resource

win10v2004-20240419-en

evasion persistence trojan upx

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  7b8df1e07bd10d0ef2678749ad73392cee7b264ce4810936d70b89db75acb8a4
- Size
  
  22KB
- MD5
  
  842108f1e17b6f54d7e243ab26210801
- SHA1
  
  37cf3f56e2d5d0a2b091d5f180d4e0a89f5c0428
- SHA256
  
  7b8df1e07bd10d0ef2678749ad73392cee7b264ce4810936d70b89db75acb8a4
- SHA512
  
  f7b90da38256b04b1f6b950a206732994662fea9accb1851b45d51f5cf16ee217411b3e7ae67762cb6aef134a2d556ea39c34d03fe2a10997f30210aeafdda18
- SSDEEP
  
  384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvXVB787v:rRkiLw3HsDSARGG/r87v
Score

10^/10

evasion persistence trojan upx
- Windows security bypass
  evasion trojan
- Drops file in Drivers directory
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojanupx

behavioral2

evasionpersistencetrojanupx

© 2018-2024

Terms | Privacy