Overview

overview

8

Static

static

e191ca0df4...18.exe

windows7-x64

8

e191ca0df4...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e191ca0df4ba047fb13cb2f305e045755b6070d9f3570ea27ee33d46be858718

  • Size

    677KB

  • Sample

    221123-tdavrsgg6y

  • MD5

    53a0d67cfbb64e20eff3ddd31f35ff50

  • SHA1

    d7de4394a18b0a44137579b4edd9f560e5db04d0

  • SHA256

    e191ca0df4ba047fb13cb2f305e045755b6070d9f3570ea27ee33d46be858718

  • SHA512

    6d4fd8c3fe6435701e2272ab1537ce2c4beb3561c32b393bf1169feca0a6e61b44580f50b8456ad4df5856700dd236dc3b1b33e288e2c7bacae88db8b8dbfcfb

  • SSDEEP

    12288:vR9PeP2R9PAP2R9PyP2R9PPP2R9PVP2R9PtP2R9PsP2R9PeP2R9PQP2R9P5P2R95:vRhRHRJRARyR+RzRtRrRuRyRfR9DyTFl

Score
8/10
upx

Malware Config

Targets

    • Target

      e191ca0df4ba047fb13cb2f305e045755b6070d9f3570ea27ee33d46be858718

    • Size

      677KB

    • MD5

      53a0d67cfbb64e20eff3ddd31f35ff50

    • SHA1

      d7de4394a18b0a44137579b4edd9f560e5db04d0

    • SHA256

      e191ca0df4ba047fb13cb2f305e045755b6070d9f3570ea27ee33d46be858718

    • SHA512

      6d4fd8c3fe6435701e2272ab1537ce2c4beb3561c32b393bf1169feca0a6e61b44580f50b8456ad4df5856700dd236dc3b1b33e288e2c7bacae88db8b8dbfcfb

    • SSDEEP

      12288:vR9PeP2R9PAP2R9PyP2R9PPP2R9PVP2R9PtP2R9PsP2R9PeP2R9PQP2R9P5P2R95:vRhRHRJRARyR+RzRtRrRuRyRfR9DyTFl

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks