General

  • Target

    3b4ae39137cfcf510da5f05540860a07cc6fb8c586cd5c75ef0edc344f3ca3fe

  • Size

    335KB

  • Sample

    220214-jsszsagfb8

  • MD5

    f56c9000b6c689656e92063874a8e48b

  • SHA1

    fc6458c4d5e44df6e1f68699df32eb6f1488d107

  • SHA256

    3b4ae39137cfcf510da5f05540860a07cc6fb8c586cd5c75ef0edc344f3ca3fe

  • SHA512

    4e587a61540dfc9cabae42a181811d617739eb3a7e7f3c594cfc096e106a78e2dc38182561d4a880f0c923f39827c94a1b59fbcdadd0d5f264ff8d44804efb6d

Score
10/10

Malware Config

Targets

    • Target

      3b4ae39137cfcf510da5f05540860a07cc6fb8c586cd5c75ef0edc344f3ca3fe

    • Size

      335KB

    • MD5

      f56c9000b6c689656e92063874a8e48b

    • SHA1

      fc6458c4d5e44df6e1f68699df32eb6f1488d107

    • SHA256

      3b4ae39137cfcf510da5f05540860a07cc6fb8c586cd5c75ef0edc344f3ca3fe

    • SHA512

      4e587a61540dfc9cabae42a181811d617739eb3a7e7f3c594cfc096e106a78e2dc38182561d4a880f0c923f39827c94a1b59fbcdadd0d5f264ff8d44804efb6d

    Score
    10/10
    • Upatre

      Upatre is a generic malware downloader.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks