General

  • Target

    9b3c9aabb7b2a992b627ca3688cd42a3508ce9fff2beedb6de02990dd58976bc

  • Size

    7KB

  • Sample

    220219-yfvp6sddhm

  • MD5

    36b397752eeeac32a44b78c7854bc6ad

  • SHA1

    30f838e761fad05439ab9e14e2a6e5da769d5ee0

  • SHA256

    9b3c9aabb7b2a992b627ca3688cd42a3508ce9fff2beedb6de02990dd58976bc

  • SHA512

    a1ec13e2c035432337c921e000ed37501caf1b5f88a4822b44af7c996ce0f77a3ba1e33801f9dae30e517f5ae904e02b13722c2eff9b82dde86a86e50d048f4f

Score
10/10

Malware Config

Targets

    • Target

      9b3c9aabb7b2a992b627ca3688cd42a3508ce9fff2beedb6de02990dd58976bc

    • Size

      7KB

    • MD5

      36b397752eeeac32a44b78c7854bc6ad

    • SHA1

      30f838e761fad05439ab9e14e2a6e5da769d5ee0

    • SHA256

      9b3c9aabb7b2a992b627ca3688cd42a3508ce9fff2beedb6de02990dd58976bc

    • SHA512

      a1ec13e2c035432337c921e000ed37501caf1b5f88a4822b44af7c996ce0f77a3ba1e33801f9dae30e517f5ae904e02b13722c2eff9b82dde86a86e50d048f4f

    Score
    10/10
    • Upatre

      Upatre is a generic malware downloader.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks