Overview

overview

10

Static

static

7393f83f5d...1b.exe

windows7_x64

10

7393f83f5d...1b.exe

windows10-2004_x64

10

Resubmissions

07-12-2023 12:48

231207-p1sxmsah37 10

06-06-2022 17:10

220606-vp5pysecgn 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7393f83f5d24d5c64e2c0298133f5052404250dfda167591019057b574ed8d1b

  • Size

    6KB

  • Sample

    220606-vp5pysecgn

  • MD5

    dea0e56e4ce2fafb80ace3b818eb44fe

  • SHA1

    ce252a12317c0d0cac83b87a76db375baf05cb94

  • SHA256

    7393f83f5d24d5c64e2c0298133f5052404250dfda167591019057b574ed8d1b

  • SHA512

    d04ba2daa722bc929628605cc0dfa4bc2ae34e485d13685a8f8a5747754c88915f32621363955640cac49c890ac01136aef7444d3fd62ab26be048ebae50e4ee

Score
10/10
upatredownloadersuricata

Malware Config

Targets

    • Target

      7393f83f5d24d5c64e2c0298133f5052404250dfda167591019057b574ed8d1b

    • Size

      6KB

    • MD5

      dea0e56e4ce2fafb80ace3b818eb44fe

    • SHA1

      ce252a12317c0d0cac83b87a76db375baf05cb94

    • SHA256

      7393f83f5d24d5c64e2c0298133f5052404250dfda167591019057b574ed8d1b

    • SHA512

      d04ba2daa722bc929628605cc0dfa4bc2ae34e485d13685a8f8a5747754c88915f32621363955640cac49c890ac01136aef7444d3fd62ab26be048ebae50e4ee

    Score
    10/10
    upatredownloadersuricata

    • Upatre

      Upatre is a generic malware downloader.

      downloaderupatre

    • suricata: ET MALWARE Common Upatre Header Structure 2

      suricata: ET MALWARE Common Upatre Header Structure 2

      suricata

    • suricata: ET MALWARE Upatre Common URI Struct Dec 01 2014

      suricata: ET MALWARE Upatre Common URI Struct Dec 01 2014

      suricata

    • suricata: ET MALWARE Upatre Common URI Struct Feb 12 2015

      suricata: ET MALWARE Upatre Common URI Struct Feb 12 2015

      suricata

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks