General

  • Target

    cead255bdfb3e6a5ab4b5a24de9b0b632a6a630c17bec6df6e5de58203738911

  • Size

    5.2MB

  • Sample

    221028-w64pnaahdm

  • MD5

    0c93412e943657c187b25874d264175d

  • SHA1

    94ba0646a5f31df3c9cb7973aa92c5506f423cb8

  • SHA256

    cead255bdfb3e6a5ab4b5a24de9b0b632a6a630c17bec6df6e5de58203738911

  • SHA512

    eb604cebb21edeb1f444c1ce7a527077ea5c6315fb8c80c354706eef0d842377cda61aaaa1332e6bde1a922fb6c716efd29193e1ee5cbc6ef4a6c7bd53e8c567

  • SSDEEP

    24576:/DyTFtjSDyTFtjZDyTFtjSDyTFtjeDyTFtjtDyTFtjSDyTFtjfDyTFtjSDyTFtjq:YtztCtztHtGtzt8tztHtGtzt

Score
8/10
upx

Malware Config

Targets

    • Target

      cead255bdfb3e6a5ab4b5a24de9b0b632a6a630c17bec6df6e5de58203738911

    • Size

      5.2MB

    • MD5

      0c93412e943657c187b25874d264175d

    • SHA1

      94ba0646a5f31df3c9cb7973aa92c5506f423cb8

    • SHA256

      cead255bdfb3e6a5ab4b5a24de9b0b632a6a630c17bec6df6e5de58203738911

    • SHA512

      eb604cebb21edeb1f444c1ce7a527077ea5c6315fb8c80c354706eef0d842377cda61aaaa1332e6bde1a922fb6c716efd29193e1ee5cbc6ef4a6c7bd53e8c567

    • SSDEEP

      24576:/DyTFtjSDyTFtjZDyTFtjSDyTFtjeDyTFtjtDyTFtjSDyTFtjfDyTFtjSDyTFtjq:YtztCtztHtGtzt8tztHtGtzt

    Score
    8/10
    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks