Overview

overview

8

Static

static

8

a05c3103af...ae.exe

windows7_x64

8

a05c3103af...ae.exe

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a05c3103af9403cacc0883f830d01bf685d3bbefbfcc4a5e1e0d11b669f700ae

  • Size

    1.5MB

  • Sample

    220705-eakhgadfdr

  • MD5

    32b4d27b0195dcd6598237ed49fac8a2

  • SHA1

    5330a378cd0ac2053af7d44547011503db109c43

  • SHA256

    a05c3103af9403cacc0883f830d01bf685d3bbefbfcc4a5e1e0d11b669f700ae

  • SHA512

    d0b693249b792655e671700b749fabaa142fada42c05ff20bfd56650d626d48db5b9ee3c8a5b4c40818e7ee9f41aeab798b7b50aadfe69e4eb36b3be6c113ee2

Score
8/10
upx

Malware Config

Targets

    • Target

      a05c3103af9403cacc0883f830d01bf685d3bbefbfcc4a5e1e0d11b669f700ae

    • Size

      1.5MB

    • MD5

      32b4d27b0195dcd6598237ed49fac8a2

    • SHA1

      5330a378cd0ac2053af7d44547011503db109c43

    • SHA256

      a05c3103af9403cacc0883f830d01bf685d3bbefbfcc4a5e1e0d11b669f700ae

    • SHA512

      d0b693249b792655e671700b749fabaa142fada42c05ff20bfd56650d626d48db5b9ee3c8a5b4c40818e7ee9f41aeab798b7b50aadfe69e4eb36b3be6c113ee2

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks