827aa255d084aab32f6cd8f9e8f0573e4285b48886285b4dfbf881e178309147 | Triage

Submit
Reports

Overview

overview

8

Static

static

7

7ce4271f57...0N.exe

windows7-x64

8

7ce4271f57...0N.exe

windows10-2004-x64

8

Sharing

General

Target

7ce4271f574a75bd6639a2b322a01830N.exe
Size

18KB
Sample

240807-hcqztawhrh
MD5

7ce4271f574a75bd6639a2b322a01830
SHA1

b74d244da386c217eae7d3c21b49833c9e6445a2
SHA256

827aa255d084aab32f6cd8f9e8f0573e4285b48886285b4dfbf881e178309147
SHA512

0e0f21f14e7dbfd8ef09d44ae9f3dffe42e5cb8aeffb25a40523a28c7cfbc83855c8fb57b3e3eab0960588098903b0d6a99ad0679cd454e4a0b068b8b89a84e0
SSDEEP

384:w+vVeet2kg6CWX5K2wuhxpSaNJawcudoD7Uwz46OXdd36a:w2VT2undnbcuyD7Uwc6OXd1h

Score

8^/10

discovery persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

7ce4271f574a75bd6639a2b322a01830N.exe

Resource

win7-20240705-en

discovery persistence upx

windows7-x64

11 signatures

120 seconds

Behavioral task

behavioral2

Sample

7ce4271f574a75bd6639a2b322a01830N.exe

Resource

win10v2004-20240802-en

discovery persistence upx

windows10-2004-x64

9 signatures

120 seconds

Malware Config

Targets

- Target
  
  7ce4271f574a75bd6639a2b322a01830N.exe
- Size
  
  18KB
- MD5
  
  7ce4271f574a75bd6639a2b322a01830
- SHA1
  
  b74d244da386c217eae7d3c21b49833c9e6445a2
- SHA256
  
  827aa255d084aab32f6cd8f9e8f0573e4285b48886285b4dfbf881e178309147
- SHA512
  
  0e0f21f14e7dbfd8ef09d44ae9f3dffe42e5cb8aeffb25a40523a28c7cfbc83855c8fb57b3e3eab0960588098903b0d6a99ad0679cd454e4a0b068b8b89a84e0
- SSDEEP
  
  384:w+vVeet2kg6CWX5K2wuhxpSaNJawcudoD7Uwz46OXdd36a:w2VT2undnbcuyD7Uwc6OXd1h
Score

8^/10

discovery persistence upx
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Modifies system executable filetype association
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Privilege Escalation

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx

© 2018-2024

Terms | Privacy