Overview

overview

10

Static

static

2d0c09826f...f3.exe

windows7_x64

10

2d0c09826f...f3.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d0c09826f42ab57f0562fdc2dabafe2745ea872b51f8eeb6b160afc9b77d6f3

  • Size

    11KB

  • Sample

    220214-jzfm2aacgm

  • MD5

    dca9a967030c5d8ddb8ab80d3284dfb5

  • SHA1

    6cb14e2f548429318285c9710b56c26ea7e295ef

  • SHA256

    2d0c09826f42ab57f0562fdc2dabafe2745ea872b51f8eeb6b160afc9b77d6f3

  • SHA512

    5dd78c90cfadc4b1ca0cdb85b26f12d5e770f90af8beea07e8f1ded2ae498d852817d0ad5927b5595bfb694d1d74e459330c27924669ed8dcce6aa9ead089a9b

Score
10/10
upatredownloader

Malware Config

Targets

    • Target

      2d0c09826f42ab57f0562fdc2dabafe2745ea872b51f8eeb6b160afc9b77d6f3

    • Size

      11KB

    • MD5

      dca9a967030c5d8ddb8ab80d3284dfb5

    • SHA1

      6cb14e2f548429318285c9710b56c26ea7e295ef

    • SHA256

      2d0c09826f42ab57f0562fdc2dabafe2745ea872b51f8eeb6b160afc9b77d6f3

    • SHA512

      5dd78c90cfadc4b1ca0cdb85b26f12d5e770f90af8beea07e8f1ded2ae498d852817d0ad5927b5595bfb694d1d74e459330c27924669ed8dcce6aa9ead089a9b

    Score
    10/10
    upatredownloader

    • Upatre

      Upatre is a generic malware downloader.

      downloaderupatre

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks