General

  • Target

    65d42c0cfa79bf744c4abe28ec4dbd868e279407d601c04f13b81090112f31a2

  • Size

    605KB

  • Sample

    220219-y7sd5acgh9

  • MD5

    02cdcb26c34ba3befe7a34432724cfcb

  • SHA1

    1b2586fbb7d67605f935cf0196cbd2dfa54a1075

  • SHA256

    65d42c0cfa79bf744c4abe28ec4dbd868e279407d601c04f13b81090112f31a2

  • SHA512

    902ad741c5a7bd9a7b4dc0e84e9d0d318378635c09002c55f213e95cffad318401a5603513e5d9e9cc80d76dcfcc044b91f0b5ef1515e16106a775c2b8636b6b

Score
10/10

Malware Config

Targets

    • Target

      65d42c0cfa79bf744c4abe28ec4dbd868e279407d601c04f13b81090112f31a2

    • Size

      605KB

    • MD5

      02cdcb26c34ba3befe7a34432724cfcb

    • SHA1

      1b2586fbb7d67605f935cf0196cbd2dfa54a1075

    • SHA256

      65d42c0cfa79bf744c4abe28ec4dbd868e279407d601c04f13b81090112f31a2

    • SHA512

      902ad741c5a7bd9a7b4dc0e84e9d0d318378635c09002c55f213e95cffad318401a5603513e5d9e9cc80d76dcfcc044b91f0b5ef1515e16106a775c2b8636b6b

    Score
    10/10
    • Upatre

      Upatre is a generic malware downloader.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Tasks