7c2906c9277e39c2d1be87adbd342e6faba7b0aa593233663d0007cb4119ccc6 | Triage

Sharing

General

Target

7c2906c9277e39c2d1be87adbd342e6faba7b0aa593233663d0007cb4119ccc6.exe
Size

1.9MB
Sample

241026-cggztaxhja
MD5

d9c7beeacdac2aae5d8c675556bfaae9
SHA1

b1c2dd3bd27624a8aa310cbb481b9a64fdbaf921
SHA256

7c2906c9277e39c2d1be87adbd342e6faba7b0aa593233663d0007cb4119ccc6
SHA512

498d3d7053cfb612cc91dc44483ab38431eb694a6aed2613b1d9ad9d90db89001e68fa07ead050fa56bbaa957276f9eea9fb985051d059df4553c66cde130e98
SSDEEP

49152:3rLGA8M9iYz45FWeYTZxTUxXpKg+fmjcozmKxS:65FWBTZxYxJo

Score

6^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  7c2906c9277e39c2d1be87adbd342e6faba7b0aa593233663d0007cb4119ccc6.exe
- Size
  
  1.9MB
- MD5
  
  d9c7beeacdac2aae5d8c675556bfaae9
- SHA1
  
  b1c2dd3bd27624a8aa310cbb481b9a64fdbaf921
- SHA256
  
  7c2906c9277e39c2d1be87adbd342e6faba7b0aa593233663d0007cb4119ccc6
- SHA512
  
  498d3d7053cfb612cc91dc44483ab38431eb694a6aed2613b1d9ad9d90db89001e68fa07ead050fa56bbaa957276f9eea9fb985051d059df4553c66cde130e98
- SSDEEP
  
  49152:3rLGA8M9iYz45FWeYTZxTUxXpKg+fmjcozmKxS:65FWBTZxYxJo
Score

6^/10

discovery persistence upx
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx