General

  • Target

    3ef858b1eb077cad768f0f11fb075ec4dd375546408a41404c7bc69e8916fe0c

  • Size

    39KB

  • Sample

    220214-jq18daabgm

  • MD5

    3029da1bc7e40fc66d049998d90c9fd5

  • SHA1

    18449595e05528476a835c469ea8314a4ddc7e4a

  • SHA256

    3ef858b1eb077cad768f0f11fb075ec4dd375546408a41404c7bc69e8916fe0c

  • SHA512

    3301d3e31d7864373a1a9309b41da6949dcf5bd9beb2b287505e42ce98796165d6140c3d0fda0f0963a890a230e8a2a3d16eaf987245def1579545a862d37d2b

Score
10/10

Malware Config

Targets

    • Target

      3ef858b1eb077cad768f0f11fb075ec4dd375546408a41404c7bc69e8916fe0c

    • Size

      39KB

    • MD5

      3029da1bc7e40fc66d049998d90c9fd5

    • SHA1

      18449595e05528476a835c469ea8314a4ddc7e4a

    • SHA256

      3ef858b1eb077cad768f0f11fb075ec4dd375546408a41404c7bc69e8916fe0c

    • SHA512

      3301d3e31d7864373a1a9309b41da6949dcf5bd9beb2b287505e42ce98796165d6140c3d0fda0f0963a890a230e8a2a3d16eaf987245def1579545a862d37d2b

    Score
    10/10
    • Upatre

      Upatre is a generic malware downloader.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks