2819f3bba9a58f832a5528bf4f635b5f9b02684607271ec72956ee5fd1688fbb

General

Target

2819f3bba9a58f832a5528bf4f635b5f9b02684607271ec72956ee5fd1688fbb
Size

3.0MB
Sample

221029-xtjpdsbce8
MD5

a34fa2bd6f8c26f24c0fbe9865248d5d
SHA1

dd76cfd025fa5147d96b81ea8410142e75d6d877
SHA256

2819f3bba9a58f832a5528bf4f635b5f9b02684607271ec72956ee5fd1688fbb
SHA512

ecc6444739bbc5455d177f23b41cddc9e96b46ac8a0a6726df756e0ae695f6afa2627337d06eb5ef92f44b9e66da2bc87ac888794768a2901dd3c6b282da6b83
SSDEEP

49152:SgCh1LGumhuW+5S0z0pEhd/l0mWKp719Qq3yobleQD80gboI5/4X0W0z0pEhd/ln:HCPSpED/ppLh3ScE4X0ypED/pT

Score

8^/10

Malware Config

Targets

- Target
  
  2819f3bba9a58f832a5528bf4f635b5f9b02684607271ec72956ee5fd1688fbb
- Size
  
  3.0MB
- MD5
  
  a34fa2bd6f8c26f24c0fbe9865248d5d
- SHA1
  
  dd76cfd025fa5147d96b81ea8410142e75d6d877
- SHA256
  
  2819f3bba9a58f832a5528bf4f635b5f9b02684607271ec72956ee5fd1688fbb
- SHA512
  
  ecc6444739bbc5455d177f23b41cddc9e96b46ac8a0a6726df756e0ae695f6afa2627337d06eb5ef92f44b9e66da2bc87ac888794768a2901dd3c6b282da6b83
- SSDEEP
  
  49152:SgCh1LGumhuW+5S0z0pEhd/l0mWKp719Qq3yobleQD80gboI5/4X0W0z0pEhd/ln:HCPSpED/ppLh3ScE4X0ypED/pT
Score

8^/10

discovery evasion persistence trojan upx
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1

T1060

Privilege Escalation

Defense Evasion

Modify Registry

2

T1112

Credential Access

Discovery

Query Registry

2

T1012

System Information Discovery

3

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

UPX packed file

Checks computer location settings

Loads dropped DLL

Adds Run key to start application

Checks installed software on the system

Checks whether UAC is enabled

Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2