455b0b4c5ec70b60ea135fc889e56b418b977a295b85c8ceb5cd43aab28effb0 | Triage

Submit
Reports

Overview

overview

8

Static

static

7

1d8d07a2fd...95.exe

windows7-x64

8

1d8d07a2fd...95.exe

windows10-2004-x64

8

Sharing

General

Target

1d8d07a2fd40cc33a31536f83a5f1195.bin
Size

94KB
Sample

240704-b38tzszane
MD5

1d8d07a2fd40cc33a31536f83a5f1195
SHA1

7565580cc47d7136bb210abf1b4f783437231670
SHA256

455b0b4c5ec70b60ea135fc889e56b418b977a295b85c8ceb5cd43aab28effb0
SHA512

92f9c9dde8e2a6e6b8d56f743fcdd6449a260a3a0881c8b62ca9b13070d012ea0b5442a7b441cd97b1b2dd67f949fa33618d91c85ed73639d8e28c20b5bf3216
SSDEEP

1536:eskKNqRSQ911QzZ+qdFYg9u9c0unIL4s60s7/XwPivhAho4TFdoN8jGhTl0:es9NUSKbeZ+cFwc0JLA0sAcAO4BdoT5

Score

8^/10

persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

1d8d07a2fd40cc33a31536f83a5f1195.exe

Resource

win7-20240611-en

persistence upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

1d8d07a2fd40cc33a31536f83a5f1195.exe

Resource

win10v2004-20240508-en

persistence upx

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  1d8d07a2fd40cc33a31536f83a5f1195.bin
- Size
  
  94KB
- MD5
  
  1d8d07a2fd40cc33a31536f83a5f1195
- SHA1
  
  7565580cc47d7136bb210abf1b4f783437231670
- SHA256
  
  455b0b4c5ec70b60ea135fc889e56b418b977a295b85c8ceb5cd43aab28effb0
- SHA512
  
  92f9c9dde8e2a6e6b8d56f743fcdd6449a260a3a0881c8b62ca9b13070d012ea0b5442a7b441cd97b1b2dd67f949fa33618d91c85ed73639d8e28c20b5bf3216
- SSDEEP
  
  1536:eskKNqRSQ911QzZ+qdFYg9u9c0unIL4s60s7/XwPivhAho4TFdoN8jGhTl0:es9NUSKbeZ+cFwc0JLA0sAcAO4BdoT5
Score

8^/10

persistence upx
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy