468a8314386d384a45e3d8630659754b011435a13265ef04b018efb0b245de2f | Triage

Submit
Reports

Overview

overview

8

Static

static

7

468a831438...2f.exe

windows7-x64

8

468a831438...2f.exe

windows10-2004-x64

7

Sharing

General

Target

468a8314386d384a45e3d8630659754b011435a13265ef04b018efb0b245de2f
Size

4.2MB
Sample

240907-z2fc2svgqk
MD5

cfb913a71362724623058dc178389483
SHA1

d9727d0b94fc8891eb6dab6a3ef33228c1ac9168
SHA256

468a8314386d384a45e3d8630659754b011435a13265ef04b018efb0b245de2f
SHA512

33c69dcc2308d41c5e66eff74318bb38d3c1a89a43076ce6285900f6426d8d0510d7f7b8d299a8b872ec69224feaebeb0d0fc0f9c35db990c8e269089d4c7a9c
SSDEEP

98304:Oc6IHvOwiGrbRzpNA08dRIR3VxYQtYy4HUStq1Ds0L2EFSWP1ngot7J:16IHGNGrbRzbA08UVVxYiYy6US0Ds02C

Score

8^/10

aspackv2 discovery persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

468a8314386d384a45e3d8630659754b011435a13265ef04b018efb0b245de2f.exe

Resource

win7-20240729-en

discovery persistence upx

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

468a8314386d384a45e3d8630659754b011435a13265ef04b018efb0b245de2f.exe

Resource

win10v2004-20240802-en

discovery persistence upx

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  468a8314386d384a45e3d8630659754b011435a13265ef04b018efb0b245de2f
- Size
  
  4.2MB
- MD5
  
  cfb913a71362724623058dc178389483
- SHA1
  
  d9727d0b94fc8891eb6dab6a3ef33228c1ac9168
- SHA256
  
  468a8314386d384a45e3d8630659754b011435a13265ef04b018efb0b245de2f
- SHA512
  
  33c69dcc2308d41c5e66eff74318bb38d3c1a89a43076ce6285900f6426d8d0510d7f7b8d299a8b872ec69224feaebeb0d0fc0f9c35db990c8e269089d4c7a9c
- SSDEEP
  
  98304:Oc6IHvOwiGrbRzpNA08dRIR3VxYQtYy4HUStq1Ds0L2EFSWP1ngot7J:16IHGNGrbRzbA08UVVxYiYy6US0Ds02C
Score

8^/10

discovery persistence upx
- Drops file in Drivers directory
- Sets service image path in registry
  persistence
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx

© 2018-2025

Terms | Privacy