Overview

overview

8

Static

static

8

bd19df046f...9b.exe

windows7-x64

8

bd19df046f...9b.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    bd19df046f91dac943e9dac0b01afda0db09a3b15be92c8968e1b9bdbf2d399b

  • Size

    83KB

  • Sample

    220919-eym89sfha7

  • MD5

    f1aff2a675f03645a0a2fbe46e75b046

  • SHA1

    c22603268f36af5641bcf67a446ea94b2b758849

  • SHA256

    bd19df046f91dac943e9dac0b01afda0db09a3b15be92c8968e1b9bdbf2d399b

  • SHA512

    1d9d9e27a08e1ac999d9ec1949d57d50ebf3a7f4cdf7d5146966879e2f6397cc853d4affb9c80d28be96e0ed4400ae62cb92c316f2a67b2fcf324cc08edcf50a

  • SSDEEP

    1536:aV0bj23edsmlh/glu9Up41sP+rFcHKsfUuHNPRABXhrtuZ4r7Q:eGsiIlu9UpX+dsc4OB64HQ

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      bd19df046f91dac943e9dac0b01afda0db09a3b15be92c8968e1b9bdbf2d399b

    • Size

      83KB

    • MD5

      f1aff2a675f03645a0a2fbe46e75b046

    • SHA1

      c22603268f36af5641bcf67a446ea94b2b758849

    • SHA256

      bd19df046f91dac943e9dac0b01afda0db09a3b15be92c8968e1b9bdbf2d399b

    • SHA512

      1d9d9e27a08e1ac999d9ec1949d57d50ebf3a7f4cdf7d5146966879e2f6397cc853d4affb9c80d28be96e0ed4400ae62cb92c316f2a67b2fcf324cc08edcf50a

    • SSDEEP

      1536:aV0bj23edsmlh/glu9Up41sP+rFcHKsfUuHNPRABXhrtuZ4r7Q:eGsiIlu9UpX+dsc4OB64HQ

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks