0a2074451143caac9612edca7935e4621e646219a46e77fe507eb57f8e63a504 | Triage

Sharing

General

Target

62bbe8a99c2f0f84d469ebc65de3c7f0N.exe
Size

423KB
Sample

240722-flnvpszdjn
MD5

62bbe8a99c2f0f84d469ebc65de3c7f0
SHA1

6a4fd45795c3e1f264b5007d5bb415b78eba544b
SHA256

0a2074451143caac9612edca7935e4621e646219a46e77fe507eb57f8e63a504
SHA512

d0752bad2d5f4a381986208d0848a4ad9b24a39feef18f3b0225112e94d0a1055bb98dc1c5341301889d88ab99a631727163fa50f141f2d2b9d65d58fe2edac9
SSDEEP

3072:LmVW8iTX/3Rfl8Xq1+0cxxsWEL02fXcIp08Moe9DESZL1U4JkMPrh:SM7jJljxYTHYZM1vq4JkMF

Score

7^/10

persistence upx

Malware Config

Targets

- Target
  
  62bbe8a99c2f0f84d469ebc65de3c7f0N.exe
- Size
  
  423KB
- MD5
  
  62bbe8a99c2f0f84d469ebc65de3c7f0
- SHA1
  
  6a4fd45795c3e1f264b5007d5bb415b78eba544b
- SHA256
  
  0a2074451143caac9612edca7935e4621e646219a46e77fe507eb57f8e63a504
- SHA512
  
  d0752bad2d5f4a381986208d0848a4ad9b24a39feef18f3b0225112e94d0a1055bb98dc1c5341301889d88ab99a631727163fa50f141f2d2b9d65d58fe2edac9
- SSDEEP
  
  3072:LmVW8iTX/3Rfl8Xq1+0cxxsWEL02fXcIp08Moe9DESZL1U4JkMPrh:SM7jJljxYTHYZM1vq4JkMF
Score

7^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2