General

  • Target

    3d93abd9549f08830e1afad2b07063d3555b282c1a8a5787058e1950bb8286d9

  • Size

    40KB

  • Sample

    220214-jrrqbsgfa6

  • MD5

    9591f1088e1e52df0ca6250523cc5423

  • SHA1

    95af25db65c6960c992b556d6b1c3d9c4fd3d6c1

  • SHA256

    3d93abd9549f08830e1afad2b07063d3555b282c1a8a5787058e1950bb8286d9

  • SHA512

    ba995c9fdbf103919ad797f5efa54c12bf29cfd4755974209964d007232f08c527a6d162ad1b5744297f65260e19a46394ebe26d1830b83867ef8003b1418ae0

Score
10/10

Malware Config

Targets

    • Target

      3d93abd9549f08830e1afad2b07063d3555b282c1a8a5787058e1950bb8286d9

    • Size

      40KB

    • MD5

      9591f1088e1e52df0ca6250523cc5423

    • SHA1

      95af25db65c6960c992b556d6b1c3d9c4fd3d6c1

    • SHA256

      3d93abd9549f08830e1afad2b07063d3555b282c1a8a5787058e1950bb8286d9

    • SHA512

      ba995c9fdbf103919ad797f5efa54c12bf29cfd4755974209964d007232f08c527a6d162ad1b5744297f65260e19a46394ebe26d1830b83867ef8003b1418ae0

    Score
    10/10
    • Upatre

      Upatre is a generic malware downloader.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks