Overview

overview

8

Static

static

8

fe1bb97645...c9.exe

windows7-x64

8

fe1bb97645...c9.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe1bb9764592e6778c256f7a96598cc6ec154be4df01838d82ff873105560ac9

  • Size

    1.1MB

  • Sample

    221011-dhlvtscbal

  • MD5

    697316b3880cb003bba2c7fd6490ac34

  • SHA1

    5478cc253b7d0a0dc556d47301343f1956426dee

  • SHA256

    fe1bb9764592e6778c256f7a96598cc6ec154be4df01838d82ff873105560ac9

  • SHA512

    3e87dc32d8a3a0780ecd26b1840fe1db504fd3ee8eeee0fac63f30bc48d331639e8efb4241750d5d0d7095559d5476ea0f85151b4c712d7a61c00d26fa8b2e70

  • SSDEEP

    24576:OFE//Tct4bOs8bPPdSmAL/stGYHLdU2SMO1N2h7HZ5ytBB7+p3uMnRs:kSV7OLHL+2BpHqjB60F

Score
8/10
upx

Malware Config

Targets

    • Target

      fe1bb9764592e6778c256f7a96598cc6ec154be4df01838d82ff873105560ac9

    • Size

      1.1MB

    • MD5

      697316b3880cb003bba2c7fd6490ac34

    • SHA1

      5478cc253b7d0a0dc556d47301343f1956426dee

    • SHA256

      fe1bb9764592e6778c256f7a96598cc6ec154be4df01838d82ff873105560ac9

    • SHA512

      3e87dc32d8a3a0780ecd26b1840fe1db504fd3ee8eeee0fac63f30bc48d331639e8efb4241750d5d0d7095559d5476ea0f85151b4c712d7a61c00d26fa8b2e70

    • SSDEEP

      24576:OFE//Tct4bOs8bPPdSmAL/stGYHLdU2SMO1N2h7HZ5ytBB7+p3uMnRs:kSV7OLHL+2BpHqjB60F

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks