Overview

overview

8

Static

static

8

bfd15ec466...a2.exe

windows7-x64

8

bfd15ec466...a2.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bfd15ec46638355608d5f63c139b1369c9f88ed7dbde7685af1b8e8b85efaca2

  • Size

    447KB

  • Sample

    221123-mt3r6aab91

  • MD5

    b11ac9f1dc4bc69b0e9e4fd9e70f3c2f

  • SHA1

    6cb25247dc4fc65c157052dc619f9903193a53ad

  • SHA256

    bfd15ec46638355608d5f63c139b1369c9f88ed7dbde7685af1b8e8b85efaca2

  • SHA512

    ff1317947b517aa1fcd52ac6e41c84fd0d168a501a710b6ebf62557ebbc1f1a8aa4b39bf30335d71e7a2c6382b14b60c83a640c261083b83e29814d682edbbbf

  • SSDEEP

    12288:QjkArEN249AyE/rbaMct4bO2/VAZPYJ2pfsLEuhi4B:LFE//Tct4bOs/mUthN

Score
8/10
evasionupx

Malware Config

Targets

    • Target

      bfd15ec46638355608d5f63c139b1369c9f88ed7dbde7685af1b8e8b85efaca2

    • Size

      447KB

    • MD5

      b11ac9f1dc4bc69b0e9e4fd9e70f3c2f

    • SHA1

      6cb25247dc4fc65c157052dc619f9903193a53ad

    • SHA256

      bfd15ec46638355608d5f63c139b1369c9f88ed7dbde7685af1b8e8b85efaca2

    • SHA512

      ff1317947b517aa1fcd52ac6e41c84fd0d168a501a710b6ebf62557ebbc1f1a8aa4b39bf30335d71e7a2c6382b14b60c83a640c261083b83e29814d682edbbbf

    • SSDEEP

      12288:QjkArEN249AyE/rbaMct4bO2/VAZPYJ2pfsLEuhi4B:LFE//Tct4bOs/mUthN

    Score
    8/10
    evasionupx

    • Modifies Windows Firewall

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks