Overview

overview

8

Static

static

8

1b2df6171b...91.exe

windows7-x64

8

1b2df6171b...91.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b2df6171bd27b7d466e6b7d9e4d643a7ebf6591fdc8e4f432b2cd7e9ed26591

  • Size

    288KB

  • Sample

    221002-1mrm7scad5

  • MD5

    6b1acffca722f2146fc16db44e4af3c6

  • SHA1

    b7af78e10b5f44df1ace4cd90df4bea72a8c4917

  • SHA256

    1b2df6171bd27b7d466e6b7d9e4d643a7ebf6591fdc8e4f432b2cd7e9ed26591

  • SHA512

    1a48edb1f53aa0d48c56736e4c2bd1ab12c7e1df4cd8c6d787b2671e1624c093286668558b9a9fcc6d86852170532a24bffc12d7c46b50e8d699831e7658fc84

  • SSDEEP

    6144:lR9Z6rex4OBG6yLXi3ValSCKPaf9b2qb3LyzhEkkgzaMyh8oSDV:lTZRxfBKwV8iEJ5GzhEkkAaMyh8oSZ

Score
8/10
upx

Malware Config

Targets

    • Target

      1b2df6171bd27b7d466e6b7d9e4d643a7ebf6591fdc8e4f432b2cd7e9ed26591

    • Size

      288KB

    • MD5

      6b1acffca722f2146fc16db44e4af3c6

    • SHA1

      b7af78e10b5f44df1ace4cd90df4bea72a8c4917

    • SHA256

      1b2df6171bd27b7d466e6b7d9e4d643a7ebf6591fdc8e4f432b2cd7e9ed26591

    • SHA512

      1a48edb1f53aa0d48c56736e4c2bd1ab12c7e1df4cd8c6d787b2671e1624c093286668558b9a9fcc6d86852170532a24bffc12d7c46b50e8d699831e7658fc84

    • SSDEEP

      6144:lR9Z6rex4OBG6yLXi3ValSCKPaf9b2qb3LyzhEkkgzaMyh8oSDV:lTZRxfBKwV8iEJ5GzhEkkAaMyh8oSZ

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks