f06c15a1affc2e63fe7a41fc276616cf4af480eb8e798a9be0971e4f95301b1a | Triage

Submit
Reports

Overview

overview

Static

static

7

f06c15a1af...aN.exe

windows7-x64

f06c15a1af...aN.exe

windows10-2004-x64

Sharing

General

Target

f06c15a1affc2e63fe7a41fc276616cf4af480eb8e798a9be0971e4f95301b1aN
Size

191KB
Sample

240920-3dwlxatfmc
MD5

7d747995d9be0a0be41e82ac16fff060
SHA1

bb82f8d648f6508d0c7479c59011d0998f643c67
SHA256

f06c15a1affc2e63fe7a41fc276616cf4af480eb8e798a9be0971e4f95301b1a
SHA512

4eb5800a07c8481cc6c405fb426a9637745462b40466cdb7bf8326c8391e181b15eb655f5be166a9c89703791315f2d44d71e02acb290550ad483f72fcc3bc61
SSDEEP

3072:6BgjS2GJyRGvl3hF85k+6LLH1zN14GPEdGVM9h9kKhnsE78KxkOKcPNyewtT:6fMG9RFsULVxbPEdGV0AIscecPNr

Score

10^/10

discovery persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

f06c15a1affc2e63fe7a41fc276616cf4af480eb8e798a9be0971e4f95301b1aN.exe

Resource

win7-20240903-en

discovery persistence upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

f06c15a1affc2e63fe7a41fc276616cf4af480eb8e798a9be0971e4f95301b1aN.exe

Resource

win10v2004-20240910-en

discovery persistence upx

windows10-2004-x64

7 signatures

120 seconds

Malware Config

Targets

- Target
  
  f06c15a1affc2e63fe7a41fc276616cf4af480eb8e798a9be0971e4f95301b1aN
- Size
  
  191KB
- MD5
  
  7d747995d9be0a0be41e82ac16fff060
- SHA1
  
  bb82f8d648f6508d0c7479c59011d0998f643c67
- SHA256
  
  f06c15a1affc2e63fe7a41fc276616cf4af480eb8e798a9be0971e4f95301b1a
- SHA512
  
  4eb5800a07c8481cc6c405fb426a9637745462b40466cdb7bf8326c8391e181b15eb655f5be166a9c89703791315f2d44d71e02acb290550ad483f72fcc3bc61
- SSDEEP
  
  3072:6BgjS2GJyRGvl3hF85k+6LLH1zN14GPEdGVM9h9kKhnsE78KxkOKcPNyewtT:6fMG9RFsULVxbPEdGV0AIscecPNr
Score

10^/10

discovery persistence upx
- Modifies WinLogon for persistence
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx

© 2018-2025

Terms | Privacy