Overview

overview

8

Static

static

8

5535c2b476...4e.exe

windows7-x64

8

5535c2b476...4e.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5535c2b47636dd13b0dc7d7a3d9122f0112fb891b5cfee0895c19562d6421d4e

  • Size

    9.8MB

  • Sample

    221129-eqmmrsgf9s

  • MD5

    0f6a812147b6c4fa96860048c786402d

  • SHA1

    1a22239cf082050252ed2c935e95383eff7162e3

  • SHA256

    5535c2b47636dd13b0dc7d7a3d9122f0112fb891b5cfee0895c19562d6421d4e

  • SHA512

    141b5c19a61c32207ebc6bfa5f5cb33c6ad1737bb9145c4a4f6b07d5f6857389dc80ece46419e60170acb7981e805fef39d9e733167db77f2c799392a6a3044d

  • SSDEEP

    196608:N0EA0O0t0v0h0E50O0t0v0h0Eg0EA0O0t0v0h0E50O0t0v0h0E7:N0EA0O0t0v0h0E50O0t0v0h0Eg0EA0O7

Score
8/10
upx

Malware Config

Targets

    • Target

      5535c2b47636dd13b0dc7d7a3d9122f0112fb891b5cfee0895c19562d6421d4e

    • Size

      9.8MB

    • MD5

      0f6a812147b6c4fa96860048c786402d

    • SHA1

      1a22239cf082050252ed2c935e95383eff7162e3

    • SHA256

      5535c2b47636dd13b0dc7d7a3d9122f0112fb891b5cfee0895c19562d6421d4e

    • SHA512

      141b5c19a61c32207ebc6bfa5f5cb33c6ad1737bb9145c4a4f6b07d5f6857389dc80ece46419e60170acb7981e805fef39d9e733167db77f2c799392a6a3044d

    • SSDEEP

      196608:N0EA0O0t0v0h0E50O0t0v0h0Eg0EA0O0t0v0h0E50O0t0v0h0E7:N0EA0O0t0v0h0E50O0t0v0h0Eg0EA0O7

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks