Overview

overview

8

Static

static

8

3a5ad49679...d6.exe

windows7-x64

8

3a5ad49679...d6.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    3a5ad49679efa697828aefd5bdb396739767445a9c8ae8e109766fbbde916ed6

  • Size

    129KB

  • Sample

    221011-lscznsgfh6

  • MD5

    0a0df2cad0ff7cc3a7879654d6b3c06c

  • SHA1

    48dd2b67b514cb3b8b51e1c13d437d1a39cfce17

  • SHA256

    3a5ad49679efa697828aefd5bdb396739767445a9c8ae8e109766fbbde916ed6

  • SHA512

    f4bd68dfedfcf5dbe9db97c009c07f86bf11faa8a8631d7c9d873c5ac43852b1ee196a7e5f4eb08db331f9a7e72acdad64399e866206824392a8560e53a38cb1

  • SSDEEP

    1536:8ET7XqHWQVeC6wRikLcWj9ycokOqR/+bZm9CqzxqVtK0phTI03lOOoJkfRuCkEEx:v7Xq2QVeCH9Bxozhzi0VcJkfR5E3a2t

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      3a5ad49679efa697828aefd5bdb396739767445a9c8ae8e109766fbbde916ed6

    • Size

      129KB

    • MD5

      0a0df2cad0ff7cc3a7879654d6b3c06c

    • SHA1

      48dd2b67b514cb3b8b51e1c13d437d1a39cfce17

    • SHA256

      3a5ad49679efa697828aefd5bdb396739767445a9c8ae8e109766fbbde916ed6

    • SHA512

      f4bd68dfedfcf5dbe9db97c009c07f86bf11faa8a8631d7c9d873c5ac43852b1ee196a7e5f4eb08db331f9a7e72acdad64399e866206824392a8560e53a38cb1

    • SSDEEP

      1536:8ET7XqHWQVeC6wRikLcWj9ycokOqR/+bZm9CqzxqVtK0phTI03lOOoJkfRuCkEEx:v7Xq2QVeCH9Bxozhzi0VcJkfR5E3a2t

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks