Overview

overview

9

Static

static

8

1f57b5b5a6...0c.exe

windows7-x64

9

1f57b5b5a6...0c.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f57b5b5a69ac0decc867c0d548bfa072b5a089205c67da201c9fc57dc0d4b0c

  • Size

    26KB

  • Sample

    221125-z59q3afg62

  • MD5

    d297a6085cdcf0610e263e2f73d6b6ba

  • SHA1

    c200c715e1dfdfcafb50ba5347c1093ae28f0ff2

  • SHA256

    1f57b5b5a69ac0decc867c0d548bfa072b5a089205c67da201c9fc57dc0d4b0c

  • SHA512

    25fe2f8fe12bfbff563c2ea1e8fefb42cf84283ad28143cc0df70e7b8e0f3209aa613ebb78612cfc9cf24874ff6c1323df8b786f90e02062f42806c1297554bd

  • SSDEEP

    768:lMPn5bGKBZ8K0wUbtuzM3hQPLEHf/3l8J:k1BZ8K0wUbcPLMfN8J

Score
9/10
upx

Malware Config

Targets

    • Target

      1f57b5b5a69ac0decc867c0d548bfa072b5a089205c67da201c9fc57dc0d4b0c

    • Size

      26KB

    • MD5

      d297a6085cdcf0610e263e2f73d6b6ba

    • SHA1

      c200c715e1dfdfcafb50ba5347c1093ae28f0ff2

    • SHA256

      1f57b5b5a69ac0decc867c0d548bfa072b5a089205c67da201c9fc57dc0d4b0c

    • SHA512

      25fe2f8fe12bfbff563c2ea1e8fefb42cf84283ad28143cc0df70e7b8e0f3209aa613ebb78612cfc9cf24874ff6c1323df8b786f90e02062f42806c1297554bd

    • SSDEEP

      768:lMPn5bGKBZ8K0wUbtuzM3hQPLEHf/3l8J:k1BZ8K0wUbcPLMfN8J

    Score
    9/10
    upx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks