269c2eb6b2309ec17014715cf6b434d472e8b3d411a1b28f24da63fcb3478d9d | Triage

Sharing

General

Target

269c2eb6b2309ec17014715cf6b434d472e8b3d411a1b28f24da63fcb3478d9d
Size

444KB
Sample

240801-1ek6fs1elg
MD5

21a1aaa404b6ce60ae5f317f58d3b2c5
SHA1

b96c6e45b8ce21898f508c112660be71d1f0aa82
SHA256

269c2eb6b2309ec17014715cf6b434d472e8b3d411a1b28f24da63fcb3478d9d
SHA512

bd56bda3845ddf6db941355b7483724c903c616b562e5a8f092e600398018b2ba92b42927f5114c29e1427d103537657968b6ac28af8ff2bb69b88e59e0a36bd
SSDEEP

3072:LmVW8iTX/3Rfl8Xq1+0cxxsWEL02fXcIp08Moe9DESZLvlnwo5vdxqxm:SM7jJljxYTHYZM1vhwqdxum

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  269c2eb6b2309ec17014715cf6b434d472e8b3d411a1b28f24da63fcb3478d9d
- Size
  
  444KB
- MD5
  
  21a1aaa404b6ce60ae5f317f58d3b2c5
- SHA1
  
  b96c6e45b8ce21898f508c112660be71d1f0aa82
- SHA256
  
  269c2eb6b2309ec17014715cf6b434d472e8b3d411a1b28f24da63fcb3478d9d
- SHA512
  
  bd56bda3845ddf6db941355b7483724c903c616b562e5a8f092e600398018b2ba92b42927f5114c29e1427d103537657968b6ac28af8ff2bb69b88e59e0a36bd
- SSDEEP
  
  3072:LmVW8iTX/3Rfl8Xq1+0cxxsWEL02fXcIp08Moe9DESZLvlnwo5vdxqxm:SM7jJljxYTHYZM1vhwqdxum
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx