Overview

overview

9

Static

static

1b607fb721...44.exe

windows7-x64

1

1b607fb721...44.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    1b607fb721d9dd77a4cf6016fed7aea956845c88404a45c7edc24c8c7ecff844

  • Size

    1.3MB

  • Sample

    221128-eltwaadc53

  • MD5

    0eb7f94c1657e4ffb273686eca5a1ff9

  • SHA1

    d3aef88483fe0af4a2221153b277c758ef633404

  • SHA256

    1b607fb721d9dd77a4cf6016fed7aea956845c88404a45c7edc24c8c7ecff844

  • SHA512

    4beaa9d3ce45a910bd8e04eddff8b7b986dff6dd14c6ad89d1aa56dfce741586c945264e1ec9aeb9d0792d8dea80ffa296cffae65cd85e5457c1ea1cabfdd37a

  • SSDEEP

    24576:J5ZFV76HxTHCXFL53WERXqjqixVnFeiQk4FTZXpIVvV50jguXK2Mu+g+O6:J5ZFV76HxDCXFL5mENqjqixVnoiQk4F6

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      1b607fb721d9dd77a4cf6016fed7aea956845c88404a45c7edc24c8c7ecff844

    • Size

      1.3MB

    • MD5

      0eb7f94c1657e4ffb273686eca5a1ff9

    • SHA1

      d3aef88483fe0af4a2221153b277c758ef633404

    • SHA256

      1b607fb721d9dd77a4cf6016fed7aea956845c88404a45c7edc24c8c7ecff844

    • SHA512

      4beaa9d3ce45a910bd8e04eddff8b7b986dff6dd14c6ad89d1aa56dfce741586c945264e1ec9aeb9d0792d8dea80ffa296cffae65cd85e5457c1ea1cabfdd37a

    • SSDEEP

      24576:J5ZFV76HxTHCXFL53WERXqjqixVnFeiQk4FTZXpIVvV50jguXK2Mu+g+O6:J5ZFV76HxDCXFL5mENqjqixVnoiQk4F6

    Score
    9/10
    persistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks