Overview

overview

9

Static

static

a3ddfdd1ef...42.exe

windows7-x64

9

a3ddfdd1ef...42.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a3ddfdd1ef18d61d435ce865c4e66fc0e4fec1798d1132e15e1bd2352f323c42

  • Size

    2.1MB

  • Sample

    221123-m7d1ysbb6y

  • MD5

    f33ffb0ba975c4ad41e79d9e4ca899c1

  • SHA1

    b6330716f78fea4a37d2bd042cdb508c183f8a51

  • SHA256

    a3ddfdd1ef18d61d435ce865c4e66fc0e4fec1798d1132e15e1bd2352f323c42

  • SHA512

    6a29d8f960bff40dbe4ab7f9ec5c5d6314248c6d8b17010fa2e1d1b990204ef5c7d5aca35fceded6750e1c157365e05eafe1c3cb8f707d8868e48d37bf8b1bc7

  • SSDEEP

    49152:YYyq8m4JMVB2KVSwx1BbWmxIGLwyQjfrw0g58Nyk8wKu:YBq8pJMVB2KVSyBSmiGocd2R8ru

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      a3ddfdd1ef18d61d435ce865c4e66fc0e4fec1798d1132e15e1bd2352f323c42

    • Size

      2.1MB

    • MD5

      f33ffb0ba975c4ad41e79d9e4ca899c1

    • SHA1

      b6330716f78fea4a37d2bd042cdb508c183f8a51

    • SHA256

      a3ddfdd1ef18d61d435ce865c4e66fc0e4fec1798d1132e15e1bd2352f323c42

    • SHA512

      6a29d8f960bff40dbe4ab7f9ec5c5d6314248c6d8b17010fa2e1d1b990204ef5c7d5aca35fceded6750e1c157365e05eafe1c3cb8f707d8868e48d37bf8b1bc7

    • SSDEEP

      49152:YYyq8m4JMVB2KVSwx1BbWmxIGLwyQjfrw0g58Nyk8wKu:YBq8pJMVB2KVSyBSmiGocd2R8ru

    Score
    9/10
    upxpersistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks