Overview

overview

8

Static

static

8

2fad400d6a...a0.exe

windows7-x64

8

2fad400d6a...a0.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    2fad400d6a5c7944fb4d17d5eeca2398b8fb6d709ce948e3da357cd1258a1ea0

  • Size

    1.1MB

  • Sample

    221003-jg3d3sfagp

  • MD5

    6b3661f6a2f90dea816697a025dc3003

  • SHA1

    9d81907a76dbf59c1b56136bc4b1ae8ab86a929c

  • SHA256

    2fad400d6a5c7944fb4d17d5eeca2398b8fb6d709ce948e3da357cd1258a1ea0

  • SHA512

    07d8d2c32d2467863587249a9495d310096a817688a6b42d4b56dbc9fd2d8e8f71bc8bbf9b7ef2a10e18b92c106124a7f8dc093ea4c62ac518183a1e26be00de

  • SSDEEP

    24576:WFE//Tct4bOsx2hPdSmAL/stGYHLdU2SMO1N2h7HZ5ytBB7+p3uMnRs:8SVvOLHL+2BpHqjB60F

Score
8/10
upx

Malware Config

Targets

    • Target

      2fad400d6a5c7944fb4d17d5eeca2398b8fb6d709ce948e3da357cd1258a1ea0

    • Size

      1.1MB

    • MD5

      6b3661f6a2f90dea816697a025dc3003

    • SHA1

      9d81907a76dbf59c1b56136bc4b1ae8ab86a929c

    • SHA256

      2fad400d6a5c7944fb4d17d5eeca2398b8fb6d709ce948e3da357cd1258a1ea0

    • SHA512

      07d8d2c32d2467863587249a9495d310096a817688a6b42d4b56dbc9fd2d8e8f71bc8bbf9b7ef2a10e18b92c106124a7f8dc093ea4c62ac518183a1e26be00de

    • SSDEEP

      24576:WFE//Tct4bOsx2hPdSmAL/stGYHLdU2SMO1N2h7HZ5ytBB7+p3uMnRs:8SVvOLHL+2BpHqjB60F

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks