Overview

overview

8

Static

static

8

cb5a8a9557...2b.exe

windows7-x64

8

cb5a8a9557...2b.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    cb5a8a9557c79a9962f2b7a0e3e957fb5611ef493bb5c370b3bfe0bbd63b072b

  • Size

    28KB

  • Sample

    220919-lq8zbsfbbr

  • MD5

    8fa7233057473deba1110468d1d7f035

  • SHA1

    79d60c77fa36881b83216d2f824342dec868fe62

  • SHA256

    cb5a8a9557c79a9962f2b7a0e3e957fb5611ef493bb5c370b3bfe0bbd63b072b

  • SHA512

    8ec7651de6230ef5602f57912429c36326876197f0490a7f0d3194388cf8310554ec9f3a97cbf5d5957f2ca92442250630b06081726db189aabb2d53746bb81c

  • SSDEEP

    768:zJmqCK1EUoWQduAAUX4gF71M6ErFC3eE6fS+n4Lgq:zJiKKUKutxk6fzn4Eq

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      cb5a8a9557c79a9962f2b7a0e3e957fb5611ef493bb5c370b3bfe0bbd63b072b

    • Size

      28KB

    • MD5

      8fa7233057473deba1110468d1d7f035

    • SHA1

      79d60c77fa36881b83216d2f824342dec868fe62

    • SHA256

      cb5a8a9557c79a9962f2b7a0e3e957fb5611ef493bb5c370b3bfe0bbd63b072b

    • SHA512

      8ec7651de6230ef5602f57912429c36326876197f0490a7f0d3194388cf8310554ec9f3a97cbf5d5957f2ca92442250630b06081726db189aabb2d53746bb81c

    • SSDEEP

      768:zJmqCK1EUoWQduAAUX4gF71M6ErFC3eE6fS+n4Lgq:zJiKKUKutxk6fzn4Eq

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks