b862e094e25950285d798c0bfcb9c587b584bb97355b23161bff6b73c0c801e3 | Triage

Submit
Reports

Overview

overview

Static

static

b862e094e2...e3.exe

windows7-x64

9

b862e094e2...e3.exe

windows10-2004-x64

9

Sharing

General

Target

b862e094e25950285d798c0bfcb9c587b584bb97355b23161bff6b73c0c801e3
Size

624KB
Sample

240524-ctl5ashh88
MD5

64dbf1b0c3fcd719adf1dcd3560c19e2
SHA1

b0ee3b9d8a0e30471f88d3072086b7cc44e09473
SHA256

b862e094e25950285d798c0bfcb9c587b584bb97355b23161bff6b73c0c801e3
SHA512

2cb38c63e5f6be65c7ca5ffd47ac2b717e370f9f828dcd5dd5c2041feaa4ab21b886839048c1acc8ab78d78ed6549dc22d7b40e1ad9f617fb1e884a7221557d7
SSDEEP

12288:7tKe6Zv23YLVFhBsC8iFHSs7xPY1f6Hrhdy/Ybw/6yfZEh778Lu91/wBdj:v6Zv2ivhBVnFys7xP86Lh7uhmh8i914D

Score

10^/10

persistence upx

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

b862e094e25950285d798c0bfcb9c587b584bb97355b23161bff6b73c0c801e3.exe

Resource

win7-20240221-en

persistence upx

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

b862e094e25950285d798c0bfcb9c587b584bb97355b23161bff6b73c0c801e3.exe

Resource

win10v2004-20240426-en

persistence upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  b862e094e25950285d798c0bfcb9c587b584bb97355b23161bff6b73c0c801e3
- Size
  
  624KB
- MD5
  
  64dbf1b0c3fcd719adf1dcd3560c19e2
- SHA1
  
  b0ee3b9d8a0e30471f88d3072086b7cc44e09473
- SHA256
  
  b862e094e25950285d798c0bfcb9c587b584bb97355b23161bff6b73c0c801e3
- SHA512
  
  2cb38c63e5f6be65c7ca5ffd47ac2b717e370f9f828dcd5dd5c2041feaa4ab21b886839048c1acc8ab78d78ed6549dc22d7b40e1ad9f617fb1e884a7221557d7
- SSDEEP
  
  12288:7tKe6Zv23YLVFhBsC8iFHSs7xPY1f6Hrhdy/Ybw/6yfZEh778Lu91/wBdj:v6Zv2ivhBVnFys7xP86Lh7uhmh8i914D
Score

9^/10

persistence upx
- UPX dump on OEP (original entry point)
- Modifies Installed Components in the registry
  persistence
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2024

Terms | Privacy