31d18fcb5c6366db79fca6292e688cd3deb226434753dc479ab44cb8f8a77a86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31d18fcb5c6366db79fca6292e688cd3deb226434753dc479ab44cb8f8a77a86
Size

86KB
Sample

240809-ytynzs1fla
MD5

351441ea6d88f21d4835c4d116e2d304
SHA1

d10b1af777990cf0a2502df06c2595f231e546a0
SHA256

31d18fcb5c6366db79fca6292e688cd3deb226434753dc479ab44cb8f8a77a86
SHA512

7a0e5a39d064314e095593b5d1b38ed118c45158d39b8ec06925ed9cbcec8be1d6a76dcaf88f479cba8677a9b44b3392995e910b7e0b6c93cfe130757393fc73
SSDEEP

1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSKSdZpf8+UHiR3D6+azbDf7d:5JjcF8KfCOcjk+guPVjSLJEwwbDZ

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  31d18fcb5c6366db79fca6292e688cd3deb226434753dc479ab44cb8f8a77a86
- Size
  
  86KB
- MD5
  
  351441ea6d88f21d4835c4d116e2d304
- SHA1
  
  d10b1af777990cf0a2502df06c2595f231e546a0
- SHA256
  
  31d18fcb5c6366db79fca6292e688cd3deb226434753dc479ab44cb8f8a77a86
- SHA512
  
  7a0e5a39d064314e095593b5d1b38ed118c45158d39b8ec06925ed9cbcec8be1d6a76dcaf88f479cba8677a9b44b3392995e910b7e0b6c93cfe130757393fc73
- SSDEEP
  
  1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSKSdZpf8+UHiR3D6+azbDf7d:5JjcF8KfCOcjk+guPVjSLJEwwbDZ
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx