Overview

overview

8

Static

static

1

1463bff114...9d.exe

windows7-x64

8

1463bff114...9d.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    1463bff11432a70a315b340ef838a105526bad60dc2f273357fa86720d4cec9d

  • Size

    451KB

  • Sample

    221125-x3jezshf93

  • MD5

    618e909d5bd786d5ba2b4b727a4bc11e

  • SHA1

    190a548f0f61f2cb83561983b4dd58969539f195

  • SHA256

    1463bff11432a70a315b340ef838a105526bad60dc2f273357fa86720d4cec9d

  • SHA512

    df09820a976c7c4cfd8fc6697b795a57f16a4eef55e92383e6dbb565b27cbc7e53eff07c6b2f18f9a26cee320f89142d70e77e3a40b07d6735d9c3e8aa9d9a05

  • SSDEEP

    12288:XMaaim0YtKuT6cDjdGOBu7DOhjKxe8p9ImiS7eiou:XMaaim0GTREWXhGxe8rnl1d

Score
8/10
discoveryupx

Malware Config

Targets

    • Target

      1463bff11432a70a315b340ef838a105526bad60dc2f273357fa86720d4cec9d

    • Size

      451KB

    • MD5

      618e909d5bd786d5ba2b4b727a4bc11e

    • SHA1

      190a548f0f61f2cb83561983b4dd58969539f195

    • SHA256

      1463bff11432a70a315b340ef838a105526bad60dc2f273357fa86720d4cec9d

    • SHA512

      df09820a976c7c4cfd8fc6697b795a57f16a4eef55e92383e6dbb565b27cbc7e53eff07c6b2f18f9a26cee320f89142d70e77e3a40b07d6735d9c3e8aa9d9a05

    • SSDEEP

      12288:XMaaim0YtKuT6cDjdGOBu7DOhjKxe8p9ImiS7eiou:XMaaim0GTREWXhGxe8rnl1d

    Score
    8/10
    discoveryupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks