6c89c3c287dcc5eb6d782ec67be6698cfb5aff371bbf7ba04f12e09c21d09426 | Triage

Sharing

General

Target

0332b361019f17cf30ed20279715bca0N.exe
Size

90KB
Sample

240801-zsw97szhrc
MD5

0332b361019f17cf30ed20279715bca0
SHA1

19cfed25ede5c9e75db5ac90996b8c834edef075
SHA256

6c89c3c287dcc5eb6d782ec67be6698cfb5aff371bbf7ba04f12e09c21d09426
SHA512

4381220ca033e3a4c6015340f911dfc4501fcabe1c08fc5044842f9036e3d262c4c6526adac5499a2cd340bf63ca4477b73c993d493d85bcdb9b2afeb174898c
SSDEEP

1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSiV/iXFEBJLC:5JjcF8KfCOcjk+guPVjSDXFEB4

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  0332b361019f17cf30ed20279715bca0N.exe
- Size
  
  90KB
- MD5
  
  0332b361019f17cf30ed20279715bca0
- SHA1
  
  19cfed25ede5c9e75db5ac90996b8c834edef075
- SHA256
  
  6c89c3c287dcc5eb6d782ec67be6698cfb5aff371bbf7ba04f12e09c21d09426
- SHA512
  
  4381220ca033e3a4c6015340f911dfc4501fcabe1c08fc5044842f9036e3d262c4c6526adac5499a2cd340bf63ca4477b73c993d493d85bcdb9b2afeb174898c
- SSDEEP
  
  1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSiV/iXFEBJLC:5JjcF8KfCOcjk+guPVjSDXFEB4
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx