4fb6b5e463ff6ebc36129ee06ea9ab19b2e4c8f12bd46d07a538581b04ba05c5 | Triage

Submit
Reports

Overview

overview

7

Static

static

7

4fb6b5e463...5N.exe

windows7-x64

7

4fb6b5e463...5N.exe

windows10-2004-x64

7

Sharing

General

Target

4fb6b5e463ff6ebc36129ee06ea9ab19b2e4c8f12bd46d07a538581b04ba05c5N
Size

20KB
Sample

240919-fzb33asepg
MD5

2dd4a8a4c467a278b74ce6d0e170e390
SHA1

de28c86ab95df2751020e3432af2b2edd144ab55
SHA256

4fb6b5e463ff6ebc36129ee06ea9ab19b2e4c8f12bd46d07a538581b04ba05c5
SHA512

e9ceb15ddab53b1bd4ac7413bdc453e0c31e78de5d48728aee3509ece44fc6a01cb15a36eaf119ee87982442fb624c38ac13c3fe3e1769f5979a60fed9cc9be3
SSDEEP

192:VjUWFh4fvYGIQnsA6psQXFaNJhLkwcud2DH9VwGfct1hM5EKU2b:9KE7pXaNJawcudoD7U7S5Ev2b

Score

7^/10

discovery evasion persistence trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

4fb6b5e463ff6ebc36129ee06ea9ab19b2e4c8f12bd46d07a538581b04ba05c5N.exe

Resource

win7-20240903-en

discovery evasion persistence trojan upx

windows7-x64

11 signatures

120 seconds

Behavioral task

behavioral2

Sample

4fb6b5e463ff6ebc36129ee06ea9ab19b2e4c8f12bd46d07a538581b04ba05c5N.exe

Resource

win10v2004-20240802-en

discovery persistence upx

windows10-2004-x64

10 signatures

120 seconds

Malware Config

Targets

- Target
  
  4fb6b5e463ff6ebc36129ee06ea9ab19b2e4c8f12bd46d07a538581b04ba05c5N
- Size
  
  20KB
- MD5
  
  2dd4a8a4c467a278b74ce6d0e170e390
- SHA1
  
  de28c86ab95df2751020e3432af2b2edd144ab55
- SHA256
  
  4fb6b5e463ff6ebc36129ee06ea9ab19b2e4c8f12bd46d07a538581b04ba05c5
- SHA512
  
  e9ceb15ddab53b1bd4ac7413bdc453e0c31e78de5d48728aee3509ece44fc6a01cb15a36eaf119ee87982442fb624c38ac13c3fe3e1769f5979a60fed9cc9be3
- SSDEEP
  
  192:VjUWFh4fvYGIQnsA6psQXFaNJhLkwcud2DH9VwGfct1hM5EKU2b:9KE7pXaNJawcudoD7U7S5Ev2b
Score

7^/10

discovery evasion persistence trojan upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojanupx

behavioral2

discoverypersistenceupx

© 2018-2025

Terms | Privacy