Overview

overview

8

Static

static

f126affd37...3b.exe

windows7-x64

8

f126affd37...3b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f126affd3751c4bb89c3d8db9d9e440ac98d57b183cdbfc33bf916dd90675c3b

  • Size

    1.2MB

  • Sample

    221004-e19v2scbbp

  • MD5

    55d1b0fe43a6e551f0dc4f746442ff0e

  • SHA1

    3d84ab50319373a344dece068d68ccd81d8fa121

  • SHA256

    f126affd3751c4bb89c3d8db9d9e440ac98d57b183cdbfc33bf916dd90675c3b

  • SHA512

    0ae61449a8e88f2416ceb41f83f6b2d584a5aa4dea316e475661d06ef81cbbe0f8f3b34b3949782fd65604ef20f079ab2d9403e830f0b6e710790e356e2cab00

  • SSDEEP

    12288:bdPSPFdPZdPcSDyTFtj3PLdPZdPzPFdPZdPSPFdPZdPcSDyTFtjRPLdPZdPzPFd1:yDyTFtjuDyTFtj4DyTFtjaDyTFtj

Score
8/10
upx

Malware Config

Targets

    • Target

      f126affd3751c4bb89c3d8db9d9e440ac98d57b183cdbfc33bf916dd90675c3b

    • Size

      1.2MB

    • MD5

      55d1b0fe43a6e551f0dc4f746442ff0e

    • SHA1

      3d84ab50319373a344dece068d68ccd81d8fa121

    • SHA256

      f126affd3751c4bb89c3d8db9d9e440ac98d57b183cdbfc33bf916dd90675c3b

    • SHA512

      0ae61449a8e88f2416ceb41f83f6b2d584a5aa4dea316e475661d06ef81cbbe0f8f3b34b3949782fd65604ef20f079ab2d9403e830f0b6e710790e356e2cab00

    • SSDEEP

      12288:bdPSPFdPZdPcSDyTFtj3PLdPZdPzPFdPZdPSPFdPZdPcSDyTFtjRPLdPZdPzPFd1:yDyTFtjuDyTFtj4DyTFtjaDyTFtj

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks