Overview

overview

8

Static

static

4290b989e3...a0.exe

windows7-x64

8

4290b989e3...a0.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4290b989e36cfc9e63dba1753ba3b7e478dcd24743a66fd343cfd4bfad9b66a0

  • Size

    6.3MB

  • Sample

    221125-pncpwsbe91

  • MD5

    9e4541da47d421d258b67d2fea8780fd

  • SHA1

    b0bac7051b1d10bd765a8bdae27cb1a6face8afc

  • SHA256

    4290b989e36cfc9e63dba1753ba3b7e478dcd24743a66fd343cfd4bfad9b66a0

  • SHA512

    876189a0d93624c5dd3fd6d7dd07a3989ce1eb88e4a4fe4a67d9c36d171ffbbe9100130184489b6934faea2b0a115a692a91ed93f67967efb40aeccd49fd7380

  • SSDEEP

    98304:a/p+CSFG24V+8nl0KMWxioNkUICHqO02UjujTaotL8XDNC9VMtm72mOh9OMWptXD:M+VFN3xiNoOsuHaotkDNLmS3h9ONJ

Score
8/10
discoveryupx

Malware Config

Targets

    • Target

      4290b989e36cfc9e63dba1753ba3b7e478dcd24743a66fd343cfd4bfad9b66a0

    • Size

      6.3MB

    • MD5

      9e4541da47d421d258b67d2fea8780fd

    • SHA1

      b0bac7051b1d10bd765a8bdae27cb1a6face8afc

    • SHA256

      4290b989e36cfc9e63dba1753ba3b7e478dcd24743a66fd343cfd4bfad9b66a0

    • SHA512

      876189a0d93624c5dd3fd6d7dd07a3989ce1eb88e4a4fe4a67d9c36d171ffbbe9100130184489b6934faea2b0a115a692a91ed93f67967efb40aeccd49fd7380

    • SSDEEP

      98304:a/p+CSFG24V+8nl0KMWxioNkUICHqO02UjujTaotL8XDNC9VMtm72mOh9OMWptXD:M+VFN3xiNoOsuHaotkDNLmS3h9ONJ

    Score
    8/10
    upxdiscovery

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks