Overview

overview

8

Static

static

8

ff51e362cb...df.exe

windows7-x64

8

ff51e362cb...df.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ff51e362cb55501e479b83ceb5838017771292a82a49bcf888c151c64c26b5df

  • Size

    6.8MB

  • Sample

    221129-ej5j1ach97

  • MD5

    6f0db52d78e2618a69a01f8f2056b097

  • SHA1

    00009086027a08eede252c830d0d175e024d71ac

  • SHA256

    ff51e362cb55501e479b83ceb5838017771292a82a49bcf888c151c64c26b5df

  • SHA512

    7f98e5875db868488298a3d385ba1b354e7d6b3bba0c7c06cbe72e56f0ef44e35d9ad1eaccd6a6475d45ece958775b23989f3e5b8d00d9c908c4817ae9b06450

  • SSDEEP

    12288:HPYdPQPFdPZdP/PFdPZdP2PFdPZdPxPFdPZdPWPFdPZdPvPFdPZdP0PFdPZdPRPh:

Score
8/10
upx

Malware Config

Targets

    • Target

      ff51e362cb55501e479b83ceb5838017771292a82a49bcf888c151c64c26b5df

    • Size

      6.8MB

    • MD5

      6f0db52d78e2618a69a01f8f2056b097

    • SHA1

      00009086027a08eede252c830d0d175e024d71ac

    • SHA256

      ff51e362cb55501e479b83ceb5838017771292a82a49bcf888c151c64c26b5df

    • SHA512

      7f98e5875db868488298a3d385ba1b354e7d6b3bba0c7c06cbe72e56f0ef44e35d9ad1eaccd6a6475d45ece958775b23989f3e5b8d00d9c908c4817ae9b06450

    • SSDEEP

      12288:HPYdPQPFdPZdP/PFdPZdP2PFdPZdPxPFdPZdPWPFdPZdPvPFdPZdP0PFdPZdPRPh:

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks