1c9a536839258fffd9024a08add16d70d55b86caaec995621940f2916f18756e | Triage

Submit
Reports

Overview

overview

8

Static

static

7

1c9a536839...eN.exe

windows7-x64

8

1c9a536839...eN.exe

windows10-2004-x64

8

Sharing

General

Target

1c9a536839258fffd9024a08add16d70d55b86caaec995621940f2916f18756eN
Size

38KB
Sample

240919-gf38watfkp
MD5

9697818d457dd5a9b4c00ca92af3c980
SHA1

f056336b17bf3189b3de017622060824e74dc8d6
SHA256

1c9a536839258fffd9024a08add16d70d55b86caaec995621940f2916f18756e
SHA512

4ca3e0b12131d2474dd5f0d5d5c81f34e6d6794310b34bed85ca9600022b82600c443aab0ee0d71683cc7d9f4300bd5b7f41987b99ef99e91c5f3da568036028
SSDEEP

768:Nzj1JegVa3Gry+uELEmITCs/NUZ6nZdYbCLECkrQoP9fmF2f1cOGY6:NWQa2TLEmITcoQxfllfmS1cOL6

Score

8^/10

discovery evasion execution upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

1c9a536839258fffd9024a08add16d70d55b86caaec995621940f2916f18756eN.exe

Resource

win7-20240903-en

discovery evasion execution upx

windows7-x64

9 signatures

120 seconds

Behavioral task

behavioral2

Sample

1c9a536839258fffd9024a08add16d70d55b86caaec995621940f2916f18756eN.exe

Resource

win10v2004-20240802-en

discovery evasion execution upx

windows10-2004-x64

8 signatures

120 seconds

Malware Config

Targets

- Target
  
  1c9a536839258fffd9024a08add16d70d55b86caaec995621940f2916f18756eN
- Size
  
  38KB
- MD5
  
  9697818d457dd5a9b4c00ca92af3c980
- SHA1
  
  f056336b17bf3189b3de017622060824e74dc8d6
- SHA256
  
  1c9a536839258fffd9024a08add16d70d55b86caaec995621940f2916f18756e
- SHA512
  
  4ca3e0b12131d2474dd5f0d5d5c81f34e6d6794310b34bed85ca9600022b82600c443aab0ee0d71683cc7d9f4300bd5b7f41987b99ef99e91c5f3da568036028
- SSDEEP
  
  768:Nzj1JegVa3Gry+uELEmITCs/NUZ6nZdYbCLECkrQoP9fmF2f1cOGY6:NWQa2TLEmITcoQxfllfmS1cOL6
Score

8^/10

discovery evasion execution upx
- Stops running service(s)
  evasion execution
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionupx

behavioral2

discoveryevasionexecutionupx

© 2018-2025

Terms | Privacy