Overview

overview

8

Static

static

1

ba59903b07...14.exe

windows7-x64

8

ba59903b07...14.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba59903b073da0b64d323479a7a605cf5cab47856f091a3dba31291a50494314

  • Size

    578KB

  • Sample

    221019-rqc5jsbef3

  • MD5

    a23f296d9f08af1b07f9636a64bf80c6

  • SHA1

    d893fe1df9e6ae6d5aa885916acdec37b936d36d

  • SHA256

    ba59903b073da0b64d323479a7a605cf5cab47856f091a3dba31291a50494314

  • SHA512

    4ff71a17ceb7565cb7e6ced92241822c957b0577b50fd1123202e765449238f9fcc7cdb818590ce3504a633f38680689cfe348fd17b7faee2b2dd190d31ad145

  • SSDEEP

    12288:yaEUYQ3n1xmVr54me2hGUqNfmleqH3IaDZrU+1c4rMjvm0Ir:yaEU33n1Or7e2hG3NEBHY6ZD13rK+1r

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      ba59903b073da0b64d323479a7a605cf5cab47856f091a3dba31291a50494314

    • Size

      578KB

    • MD5

      a23f296d9f08af1b07f9636a64bf80c6

    • SHA1

      d893fe1df9e6ae6d5aa885916acdec37b936d36d

    • SHA256

      ba59903b073da0b64d323479a7a605cf5cab47856f091a3dba31291a50494314

    • SHA512

      4ff71a17ceb7565cb7e6ced92241822c957b0577b50fd1123202e765449238f9fcc7cdb818590ce3504a633f38680689cfe348fd17b7faee2b2dd190d31ad145

    • SSDEEP

      12288:yaEUYQ3n1xmVr54me2hGUqNfmleqH3IaDZrU+1c4rMjvm0Ir:yaEU33n1Or7e2hG3NEBHY6ZD13rK+1r

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks