Overview

overview

8

Static

static

a3b23415e7...cd.exe

windows7-x64

8

a3b23415e7...cd.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a3b23415e7aed3a8f289f0b94d7f056f0e12beb87a81573db9e639fe3d26a6cd

  • Size

    569KB

  • Sample

    221001-yea95scgd3

  • MD5

    67ce6ec81564c49ceea44b1ccde4bdd0

  • SHA1

    363dbaef9610e2a442acee0eeb4cf87ae148535d

  • SHA256

    a3b23415e7aed3a8f289f0b94d7f056f0e12beb87a81573db9e639fe3d26a6cd

  • SHA512

    6c4f302e31958e5ecebb88f2e14ef2f7a5e382cf5c0eb158a8b731311c445820304a8b7dd52fb59d9b5aed62832286ec0cfa794dac80b355dbaff0989d56f044

  • SSDEEP

    12288:Gzy6rRxEOE+B7PgUr72MXtKed65Ot6ld3/DCeEt6/gMKlHw0QK7Oy:d6rTZE+ZPx/2TeOOtcdGt6pECK77

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      a3b23415e7aed3a8f289f0b94d7f056f0e12beb87a81573db9e639fe3d26a6cd

    • Size

      569KB

    • MD5

      67ce6ec81564c49ceea44b1ccde4bdd0

    • SHA1

      363dbaef9610e2a442acee0eeb4cf87ae148535d

    • SHA256

      a3b23415e7aed3a8f289f0b94d7f056f0e12beb87a81573db9e639fe3d26a6cd

    • SHA512

      6c4f302e31958e5ecebb88f2e14ef2f7a5e382cf5c0eb158a8b731311c445820304a8b7dd52fb59d9b5aed62832286ec0cfa794dac80b355dbaff0989d56f044

    • SSDEEP

      12288:Gzy6rRxEOE+B7PgUr72MXtKed65Ot6ld3/DCeEt6/gMKlHw0QK7Oy:d6rTZE+ZPx/2TeOOtcdGt6pECK77

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks