Overview

overview

8

Static

static

8

6a623fa546...19.exe

windows7-x64

8

6a623fa546...19.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a623fa546eab98315ba9a624737cbca125625445d8be87bb9e5651f1587c619

  • Size

    65KB

  • Sample

    221129-j45gysbd73

  • MD5

    07128e78180c82ccf030f1fcdffed510

  • SHA1

    30a9aa468537a9a707f0af7ce1ab9adf9bf151bb

  • SHA256

    6a623fa546eab98315ba9a624737cbca125625445d8be87bb9e5651f1587c619

  • SHA512

    890ee57b0a51d5da64943bd527ecda79cfba2548516a28475436efd8f87540ab3f9c29f9ad6eb07f42534846bdc53f6668021071fe3cfd8db3b7876470268779

  • SSDEEP

    1536:u2REWuFsSm2kqcHTIPt4r29YwDJg68jAAhetaVfuZGe:TCWuG32czIPt4ruHMcGsemZ7

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      6a623fa546eab98315ba9a624737cbca125625445d8be87bb9e5651f1587c619

    • Size

      65KB

    • MD5

      07128e78180c82ccf030f1fcdffed510

    • SHA1

      30a9aa468537a9a707f0af7ce1ab9adf9bf151bb

    • SHA256

      6a623fa546eab98315ba9a624737cbca125625445d8be87bb9e5651f1587c619

    • SHA512

      890ee57b0a51d5da64943bd527ecda79cfba2548516a28475436efd8f87540ab3f9c29f9ad6eb07f42534846bdc53f6668021071fe3cfd8db3b7876470268779

    • SSDEEP

      1536:u2REWuFsSm2kqcHTIPt4r29YwDJg68jAAhetaVfuZGe:TCWuG32czIPt4ruHMcGsemZ7

    Score
    8/10
    upxvmprotect

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks