General
- Target 7393f83f5d24d5c64e2c0298133f5052404250dfda167591019057b574ed8d1b
- Size 6KB
- Sample220606-vp5pysecgn
- SHA256 7393f83f5d24d5c64e2c0298133f5052404250dfda167591019057b574ed8d1b
Score
10/10
Malware Config
Targets
-
- Target 7393f83f5d24d5c64e2c0298133f5052404250dfda167591019057b574ed8d1b
- Size 6KB
- SHA256 7393f83f5d24d5c64e2c0298133f5052404250dfda167591019057b574ed8d1b
Score10/10-
Upatre
Upatre is a generic malware downloader.
-
suricata: ET MALWARE Common Upatre Header Structure 2
suricata: ET MALWARE Common Upatre Header Structure 2
-
suricata: ET MALWARE Upatre Common URI Struct Dec 01 2014
suricata: ET MALWARE Upatre Common URI Struct Dec 01 2014
-
suricata: ET MALWARE Upatre Common URI Struct Feb 12 2015
suricata: ET MALWARE Upatre Common URI Struct Feb 12 2015
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL