Overview

overview

8

Static

static

8

5d4db4bf55...bd.exe

windows7-x64

8

5d4db4bf55...bd.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5d4db4bf556a4f8ee30c5025beeb0e364619168ce8d37ce00a782c494222a9bd

  • Size

    14.9MB

  • Sample

    220922-fhxnfaaad4

  • MD5

    18ebaca8e38a079ee62db485ac81f666

  • SHA1

    fa30535cd8752ece4f58836d48ebe20a4e5e5369

  • SHA256

    5d4db4bf556a4f8ee30c5025beeb0e364619168ce8d37ce00a782c494222a9bd

  • SHA512

    97e42f44959babbc70e5a022c344ad06b453780836360454a179d30fb3796252d6972a6b15a0d97ac116a4bdcf6fb4a6667126c18e01a39b829d818fa6a37259

  • SSDEEP

    393216:OARC0sewaWaX5xLrhqiKFkS0v3lVXLMDJp6/Qxx:OAMELHhrYkS0vvXjQxx

Score
8/10
upx

Malware Config

Targets

    • Target

      5d4db4bf556a4f8ee30c5025beeb0e364619168ce8d37ce00a782c494222a9bd

    • Size

      14.9MB

    • MD5

      18ebaca8e38a079ee62db485ac81f666

    • SHA1

      fa30535cd8752ece4f58836d48ebe20a4e5e5369

    • SHA256

      5d4db4bf556a4f8ee30c5025beeb0e364619168ce8d37ce00a782c494222a9bd

    • SHA512

      97e42f44959babbc70e5a022c344ad06b453780836360454a179d30fb3796252d6972a6b15a0d97ac116a4bdcf6fb4a6667126c18e01a39b829d818fa6a37259

    • SSDEEP

      393216:OARC0sewaWaX5xLrhqiKFkS0v3lVXLMDJp6/Qxx:OAMELHhrYkS0vvXjQxx

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks