ef7df42117159f14e01df0b453d93b13a1f938853cfd43bd30f90d32eb133dc1 | Triage

Sharing

General

Target

6d9d4848a4ce0932b8c1d1e49c6e5680N.exe
Size

424KB
Sample

240806-g5r7xa1hlq
MD5

6d9d4848a4ce0932b8c1d1e49c6e5680
SHA1

c08fc38b827dda79fc41d448d1aa4165fe7c9e8c
SHA256

ef7df42117159f14e01df0b453d93b13a1f938853cfd43bd30f90d32eb133dc1
SHA512

8b88991dfc6513ba2514543e954c7ab60087845c59ad5cf8192a4bceb51f3788134dcf507dbba3addd9c8fb958c8ccb0390f57f59da0258d2537483696ff5b7b
SSDEEP

3072:LmVW8iTX/3Rfl8Xq1+0cxxsWEL02fXcIp08Moe9DESZLNF7SbvFP:SM7jJljxYTHYZM1vibl

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  6d9d4848a4ce0932b8c1d1e49c6e5680N.exe
- Size
  
  424KB
- MD5
  
  6d9d4848a4ce0932b8c1d1e49c6e5680
- SHA1
  
  c08fc38b827dda79fc41d448d1aa4165fe7c9e8c
- SHA256
  
  ef7df42117159f14e01df0b453d93b13a1f938853cfd43bd30f90d32eb133dc1
- SHA512
  
  8b88991dfc6513ba2514543e954c7ab60087845c59ad5cf8192a4bceb51f3788134dcf507dbba3addd9c8fb958c8ccb0390f57f59da0258d2537483696ff5b7b
- SSDEEP
  
  3072:LmVW8iTX/3Rfl8Xq1+0cxxsWEL02fXcIp08Moe9DESZLNF7SbvFP:SM7jJljxYTHYZM1vibl
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx