Overview

overview

10

Static

static

8fb5bb6e98...b3.exe

windows7_x64

10

8fb5bb6e98...b3.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8fb5bb6e9859732b8c4f0accb086cff88aab31a4050c8bd66da04ccf3bb2cfb3

  • Size

    31KB

  • Sample

    220219-ymebrsceh6

  • MD5

    ec04f3f4850e52e9d852374502beb39f

  • SHA1

    00ba0a57045736c252d16e78ed89a8025f7152ab

  • SHA256

    8fb5bb6e9859732b8c4f0accb086cff88aab31a4050c8bd66da04ccf3bb2cfb3

  • SHA512

    9089b0bc8dc05b9f79b660dd13732ef03fbab9928e18f21a2995c0d59b4964d675e6b0a620ac2e6820330b780e844432eaea565f0302f9c877554d91c7d58ee4

Score
10/10
upatredownloader

Malware Config

Targets

    • Target

      8fb5bb6e9859732b8c4f0accb086cff88aab31a4050c8bd66da04ccf3bb2cfb3

    • Size

      31KB

    • MD5

      ec04f3f4850e52e9d852374502beb39f

    • SHA1

      00ba0a57045736c252d16e78ed89a8025f7152ab

    • SHA256

      8fb5bb6e9859732b8c4f0accb086cff88aab31a4050c8bd66da04ccf3bb2cfb3

    • SHA512

      9089b0bc8dc05b9f79b660dd13732ef03fbab9928e18f21a2995c0d59b4964d675e6b0a620ac2e6820330b780e844432eaea565f0302f9c877554d91c7d58ee4

    Score
    10/10
    upatredownloader

    • Upatre

      Upatre is a generic malware downloader.

      downloaderupatre

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks