General

  • Target

    47f92cedff6396557e801853e31e9cafdd47dd9b5cd18621c254523376b6744a

  • Size

    600KB

  • Sample

    220214-jmm7caged7

  • MD5

    46884b25c44a21c20cda77e028315c4c

  • SHA1

    9aa4b276dcd952f472480022c825470f0616eb2d

  • SHA256

    47f92cedff6396557e801853e31e9cafdd47dd9b5cd18621c254523376b6744a

  • SHA512

    f8f73950472aa703e432ea54c00dd36aede6b8b804e5c457790b0c6645a59bad281296bfb139d86caf8cbc3bbd837471020251b8a9e8ddb796840a5a93b2d96a

Score
10/10

Malware Config

Targets

    • Target

      47f92cedff6396557e801853e31e9cafdd47dd9b5cd18621c254523376b6744a

    • Size

      600KB

    • MD5

      46884b25c44a21c20cda77e028315c4c

    • SHA1

      9aa4b276dcd952f472480022c825470f0616eb2d

    • SHA256

      47f92cedff6396557e801853e31e9cafdd47dd9b5cd18621c254523376b6744a

    • SHA512

      f8f73950472aa703e432ea54c00dd36aede6b8b804e5c457790b0c6645a59bad281296bfb139d86caf8cbc3bbd837471020251b8a9e8ddb796840a5a93b2d96a

    Score
    10/10
    • Upatre

      Upatre is a generic malware downloader.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks