Overview

overview

10

Static

static

8

e573158eea...6b.exe

windows7-x64

10

e573158eea...6b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e573158eeaa8fbad0f110b3da79104cb4e932af9630de401c0dfaf893032e66b

  • Size

    63KB

  • Sample

    221127-nptjcsde84

  • MD5

    a3a62214775c51889b84f90c2d9d3899

  • SHA1

    0ae0de0a510f8508d30c6d6564ef64c855fe9b53

  • SHA256

    e573158eeaa8fbad0f110b3da79104cb4e932af9630de401c0dfaf893032e66b

  • SHA512

    5fae0f3ca7f98353cd16e06f032dd5bb65d7acf6778077d495a091808889497eaa6b33e14ade78538c5f78e0627c8af41fb629acdf04d91b6b99aab0c012533c

  • SSDEEP

    1536:B39hx9KpBwbFainc1SrMJRsLqq9jO/ojwTY66jsClXdL:x99OSRaH1wysLqAjY6jssNL

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      e573158eeaa8fbad0f110b3da79104cb4e932af9630de401c0dfaf893032e66b

    • Size

      63KB

    • MD5

      a3a62214775c51889b84f90c2d9d3899

    • SHA1

      0ae0de0a510f8508d30c6d6564ef64c855fe9b53

    • SHA256

      e573158eeaa8fbad0f110b3da79104cb4e932af9630de401c0dfaf893032e66b

    • SHA512

      5fae0f3ca7f98353cd16e06f032dd5bb65d7acf6778077d495a091808889497eaa6b33e14ade78538c5f78e0627c8af41fb629acdf04d91b6b99aab0c012533c

    • SSDEEP

      1536:B39hx9KpBwbFainc1SrMJRsLqq9jO/ojwTY66jsClXdL:x99OSRaH1wysLqAjY6jssNL

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks