c010c31d3130117990b429219acdea990161f5c15f17217bf37e408739e07d2c | Triage

Submit
Reports

Overview

overview

Static

static

5

c010c31d31...2c.exe

windows7-x64

c010c31d31...2c.exe

windows10-2004-x64

Sharing

General

Target

c010c31d3130117990b429219acdea990161f5c15f17217bf37e408739e07d2c.exe
Size

30KB
Sample

241122-k4km8axraw
MD5

342c4c4f892f98b00b29035f9e483e10
SHA1

01323c60ad0f23039a8dee51c86c550d0b971519
SHA256

c010c31d3130117990b429219acdea990161f5c15f17217bf37e408739e07d2c
SHA512

b7d14a3eefb27871caa5cd6550731ff30dc3e174f78d089405edefd8b9ef22f31ec47ee44bc3f12ffde5e0ea2c54cd1061eb1f41e8ff82cb73389042b682f423
SSDEEP

768:tQbuQRy2UjmUndnlTttxDn+3jiSkjRY6AB7kKfYoJ+ifBEewqu:QuQRylaUDTDxDXjy6AB7koYy2Gu

Score

10^/10

defense_evasion discovery evasion persistence trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

c010c31d3130117990b429219acdea990161f5c15f17217bf37e408739e07d2c.exe

Resource

win7-20240903-en

defense_evasion discovery evasion persistence trojan upx

windows7-x64

15 signatures

120 seconds

Behavioral task

behavioral2

Sample

c010c31d3130117990b429219acdea990161f5c15f17217bf37e408739e07d2c.exe

Resource

win10v2004-20241007-en

defense_evasion discovery evasion persistence trojan upx

windows10-2004-x64

14 signatures

120 seconds

Malware Config

Targets

- Target
  
  c010c31d3130117990b429219acdea990161f5c15f17217bf37e408739e07d2c.exe
- Size
  
  30KB
- MD5
  
  342c4c4f892f98b00b29035f9e483e10
- SHA1
  
  01323c60ad0f23039a8dee51c86c550d0b971519
- SHA256
  
  c010c31d3130117990b429219acdea990161f5c15f17217bf37e408739e07d2c
- SHA512
  
  b7d14a3eefb27871caa5cd6550731ff30dc3e174f78d089405edefd8b9ef22f31ec47ee44bc3f12ffde5e0ea2c54cd1061eb1f41e8ff82cb73389042b682f423
- SSDEEP
  
  768:tQbuQRy2UjmUndnlTttxDn+3jiSkjRY6AB7kKfYoJ+ifBEewqu:QuQRylaUDTDxDXjy6AB7koYy2Gu
Score

10^/10

defense_evasion discovery evasion persistence trojan upx
- Windows security bypass
  evasion trojan
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Indicator Removal: Clear Persistence
  remove IFEO.
  defense_evasion
- Modifies WinLogon
  persistence
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Winlogon Helper DLL

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Winlogon Helper DLL

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Impair Defenses

Disable or Modify Tools

Indicator Removal

Clear Persistence

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryevasionpersistencetrojanupx

behavioral2

defense_evasiondiscoveryevasionpersistencetrojanupx

© 2018-2024

Terms | Privacy