a17a18ddc861baf3ae079b6e75d2d99d843b624e24b58fe03a72eab78d0168b6 | Triage

Sharing

General

Target

d1f3c410d6c8f73cbc0926592f73ce30N.exe
Size

69KB
Sample

240725-p7f7essgmb
MD5

d1f3c410d6c8f73cbc0926592f73ce30
SHA1

d96cc5acfc4ce9047102791a23a703ac6eb3b402
SHA256

a17a18ddc861baf3ae079b6e75d2d99d843b624e24b58fe03a72eab78d0168b6
SHA512

f427ccad53e31f164d5ec65c0bc7826363ccb06ae4c3b4a42f5acbd3efd132510f2712cbfc9c9d61a91db69256ff9d3f1342c7342d7a52f9cb1344e8465674a8
SSDEEP

1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSRe3UXnbVeDX:5JjcF8KfCOcjk+guPVjSs3ybVy

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  d1f3c410d6c8f73cbc0926592f73ce30N.exe
- Size
  
  69KB
- MD5
  
  d1f3c410d6c8f73cbc0926592f73ce30
- SHA1
  
  d96cc5acfc4ce9047102791a23a703ac6eb3b402
- SHA256
  
  a17a18ddc861baf3ae079b6e75d2d99d843b624e24b58fe03a72eab78d0168b6
- SHA512
  
  f427ccad53e31f164d5ec65c0bc7826363ccb06ae4c3b4a42f5acbd3efd132510f2712cbfc9c9d61a91db69256ff9d3f1342c7342d7a52f9cb1344e8465674a8
- SSDEEP
  
  1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSRe3UXnbVeDX:5JjcF8KfCOcjk+guPVjSs3ybVy
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx