Overview

overview

9

Static

static

8

9c4e93b552...8f.exe

windows7-x64

9

9c4e93b552...8f.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c4e93b552f391b3eb8aab77eef09f5d4b0a6ecc53ba05b3955d17f24c10f48f

  • Size

    369KB

  • Sample

    221127-hrp13abh8x

  • MD5

    6d7aa7ac66d551bb269cb4c3ecdac19b

  • SHA1

    5cd80844b323b0279a6361f4428e6293b2a17b82

  • SHA256

    9c4e93b552f391b3eb8aab77eef09f5d4b0a6ecc53ba05b3955d17f24c10f48f

  • SHA512

    cb26e4fd525b4a47eccab0c0f74e827de7dd4dddccfdd714cfac96165a3baadf25bb5fb4e02b88aba33ac551473788aa3daf0da86f799e63f3cd2b195ddf6856

  • SSDEEP

    6144:rGt5EUTC5+6lIj+qbscxYzN10c957YSFWT4gGlvA3sz3mMFN1tWrSqLWTBh/fu:6t5E2FxscxKN1T0wWHGlvssTmOFmSBvu

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      9c4e93b552f391b3eb8aab77eef09f5d4b0a6ecc53ba05b3955d17f24c10f48f

    • Size

      369KB

    • MD5

      6d7aa7ac66d551bb269cb4c3ecdac19b

    • SHA1

      5cd80844b323b0279a6361f4428e6293b2a17b82

    • SHA256

      9c4e93b552f391b3eb8aab77eef09f5d4b0a6ecc53ba05b3955d17f24c10f48f

    • SHA512

      cb26e4fd525b4a47eccab0c0f74e827de7dd4dddccfdd714cfac96165a3baadf25bb5fb4e02b88aba33ac551473788aa3daf0da86f799e63f3cd2b195ddf6856

    • SSDEEP

      6144:rGt5EUTC5+6lIj+qbscxYzN10c957YSFWT4gGlvA3sz3mMFN1tWrSqLWTBh/fu:6t5E2FxscxKN1T0wWHGlvssTmOFmSBvu

    Score
    9/10
    upxpersistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks