Overview

overview

8

Static

static

09594dcf95...2b.exe

windows7-x64

8

09594dcf95...2b.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    09594dcf9515998adfa96906c066bd6edd9ea455c0ebadacdbd54c84472d382b

  • Size

    6.0MB

  • Sample

    221124-afjqxahe8v

  • MD5

    548583e54077fec31049220709e7f4b9

  • SHA1

    4d0822015fbcdb4dbd1dc8f57a116fd91fb35fd3

  • SHA256

    09594dcf9515998adfa96906c066bd6edd9ea455c0ebadacdbd54c84472d382b

  • SHA512

    9f8f32cc42d79c3473493d3b0f2839a95ca1df509733f7dc47e4ee8b35caf29d16e2e9361a2adabe6d3104de9e35f4e3dbba047b87d92d98f524d1826673aef6

  • SSDEEP

    98304:a6p+CgTmGHqC3v/fq6Q3vxTSsTyVlP4AvZ8X16DhKWAZvhUdmWLOPvKlu0CbxaC2:x+JT8G/y6QMsTyVlPGMDhGUd7aylu0Cy

Score
8/10
discoveryupx

Malware Config

Targets

    • Target

      09594dcf9515998adfa96906c066bd6edd9ea455c0ebadacdbd54c84472d382b

    • Size

      6.0MB

    • MD5

      548583e54077fec31049220709e7f4b9

    • SHA1

      4d0822015fbcdb4dbd1dc8f57a116fd91fb35fd3

    • SHA256

      09594dcf9515998adfa96906c066bd6edd9ea455c0ebadacdbd54c84472d382b

    • SHA512

      9f8f32cc42d79c3473493d3b0f2839a95ca1df509733f7dc47e4ee8b35caf29d16e2e9361a2adabe6d3104de9e35f4e3dbba047b87d92d98f524d1826673aef6

    • SSDEEP

      98304:a6p+CgTmGHqC3v/fq6Q3vxTSsTyVlP4AvZ8X16DhKWAZvhUdmWLOPvKlu0CbxaC2:x+JT8G/y6QMsTyVlPGMDhGUd7aylu0Cy

    Score
    8/10
    upxdiscovery

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks