Overview

overview

8

Static

static

8

f59bbd544f...1a.exe

windows7-x64

8

f59bbd544f...1a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f59bbd544f77c89dffb40c1e7c717145d79c6129781f29b451d3cbb91587d11a

  • Size

    120KB

  • Sample

    221123-vk55xshc83

  • MD5

    5b1b5ab1077308d74e5a5d82795e0f07

  • SHA1

    00aa2b216f527911cfdaf20aa90572f80ddc3b53

  • SHA256

    f59bbd544f77c89dffb40c1e7c717145d79c6129781f29b451d3cbb91587d11a

  • SHA512

    ba7b9e5c13f140c1fae317dd9b13e8786466a606518a55d827f8c95f32cc996bb79ae554ae5311c4b282ad5420a62fb89063b82791285e34c096bfd8ec930ba8

  • SSDEEP

    3072:6mi+/dgy5Ef8doutaZZYCajVJ4Zro6ZPn2bqYExU05QP:6tSEf+oSaR6PsJP2kb5Q

Score
8/10
upx

Malware Config

Targets

    • Target

      f59bbd544f77c89dffb40c1e7c717145d79c6129781f29b451d3cbb91587d11a

    • Size

      120KB

    • MD5

      5b1b5ab1077308d74e5a5d82795e0f07

    • SHA1

      00aa2b216f527911cfdaf20aa90572f80ddc3b53

    • SHA256

      f59bbd544f77c89dffb40c1e7c717145d79c6129781f29b451d3cbb91587d11a

    • SHA512

      ba7b9e5c13f140c1fae317dd9b13e8786466a606518a55d827f8c95f32cc996bb79ae554ae5311c4b282ad5420a62fb89063b82791285e34c096bfd8ec930ba8

    • SSDEEP

      3072:6mi+/dgy5Ef8doutaZZYCajVJ4Zro6ZPn2bqYExU05QP:6tSEf+oSaR6PsJP2kb5Q

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks