General

  • Target

    7b6cce389fe2822fc6edffcdbe337f78b0e2541a24dba37ff904297d9e8199ad

  • Size

    206KB

  • Sample

    221030-vxyllsbfc7

  • MD5

    81a202644aac74aae4a6499628de6960

  • SHA1

    3007aee0083a2a8e6361070903c2182c236c0a7f

  • SHA256

    7b6cce389fe2822fc6edffcdbe337f78b0e2541a24dba37ff904297d9e8199ad

  • SHA512

    f13183a8e5de2d990572ff654793dee7eeef71490304bb2b45d014a547413a5f3def7e5a2d075dd03ea68ac464cba7869d6c9dc52a846055777ea31cc5e65562

  • SSDEEP

    3072:T8FuCO2outY/SI03ms6KPBEOU+hhjQRuSyseGCH:4ECJoSfV2spC+Djm9

Score
8/10

Malware Config

Targets

    • Target

      7b6cce389fe2822fc6edffcdbe337f78b0e2541a24dba37ff904297d9e8199ad

    • Size

      206KB

    • MD5

      81a202644aac74aae4a6499628de6960

    • SHA1

      3007aee0083a2a8e6361070903c2182c236c0a7f

    • SHA256

      7b6cce389fe2822fc6edffcdbe337f78b0e2541a24dba37ff904297d9e8199ad

    • SHA512

      f13183a8e5de2d990572ff654793dee7eeef71490304bb2b45d014a547413a5f3def7e5a2d075dd03ea68ac464cba7869d6c9dc52a846055777ea31cc5e65562

    • SSDEEP

      3072:T8FuCO2outY/SI03ms6KPBEOU+hhjQRuSyseGCH:4ECJoSfV2spC+Djm9

    Score
    8/10
    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks