Overview

overview

8

Static

static

c5e0ea4d9d...82.exe

windows7-x64

8

c5e0ea4d9d...82.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5e0ea4d9d81433e0b6ec0b99fa0c3106173d5fb5949dc6b098816ce41d4d782

  • Size

    613KB

  • Sample

    221127-xllh1sba83

  • MD5

    b06127ff0c2c975d92c80c48c4a7fffc

  • SHA1

    1cce9115692d54425240392ea5fde7035eba4516

  • SHA256

    c5e0ea4d9d81433e0b6ec0b99fa0c3106173d5fb5949dc6b098816ce41d4d782

  • SHA512

    904dbbfe25bbe46fa9f5e7e87d998cf4fe692ed0f5c1fc241f3190ad3902f0ee7080e86bbeffcf24e11f57ebee0d5ae6da54d8c917158f387f245bbff92e6e58

  • SSDEEP

    12288:vR9PHPCR9PRPCR9PBPCR9PZPCR9PZPCR9PjPCR9PbPCR9PPPCR9PvPCR9P:vRMRiRWR6R+RMRwRAR0R

Score
8/10
upx

Malware Config

Targets

    • Target

      c5e0ea4d9d81433e0b6ec0b99fa0c3106173d5fb5949dc6b098816ce41d4d782

    • Size

      613KB

    • MD5

      b06127ff0c2c975d92c80c48c4a7fffc

    • SHA1

      1cce9115692d54425240392ea5fde7035eba4516

    • SHA256

      c5e0ea4d9d81433e0b6ec0b99fa0c3106173d5fb5949dc6b098816ce41d4d782

    • SHA512

      904dbbfe25bbe46fa9f5e7e87d998cf4fe692ed0f5c1fc241f3190ad3902f0ee7080e86bbeffcf24e11f57ebee0d5ae6da54d8c917158f387f245bbff92e6e58

    • SSDEEP

      12288:vR9PHPCR9PRPCR9PBPCR9PZPCR9PZPCR9PjPCR9PbPCR9PPPCR9PvPCR9P:vRMRiRWR6R+RMRwRAR0R

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks