Overview

overview

8

Static

static

b18c25df69...81.exe

windows7-x64

8

b18c25df69...81.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b18c25df69fe115ec9d182d859ad35b33a6c80b4700abbf59f12c4d851471481

  • Size

    335KB

  • Sample

    221130-251t9sgf6v

  • MD5

    3123850b28df13cc3563713cb64caef5

  • SHA1

    d44eab7bf6067f3618c5aa9ac9e7a83a7127143f

  • SHA256

    b18c25df69fe115ec9d182d859ad35b33a6c80b4700abbf59f12c4d851471481

  • SHA512

    2dad171e4e6c909080d299be105d39fc126840509908a7be981db5a6721c62f01bedccb2bcd73f3e9445bc5a1b1b72211221634c77906f712d7d0b3ecdde2f69

  • SSDEEP

    6144:ZbXE9OiTGfhEClq9Zd6cdURGBFphMn3k/NEXWGHAcRUoCR:hU9XiuiywGFpqn3k/NuVnk

Score
8/10
upx

Malware Config

Targets

    • Target

      b18c25df69fe115ec9d182d859ad35b33a6c80b4700abbf59f12c4d851471481

    • Size

      335KB

    • MD5

      3123850b28df13cc3563713cb64caef5

    • SHA1

      d44eab7bf6067f3618c5aa9ac9e7a83a7127143f

    • SHA256

      b18c25df69fe115ec9d182d859ad35b33a6c80b4700abbf59f12c4d851471481

    • SHA512

      2dad171e4e6c909080d299be105d39fc126840509908a7be981db5a6721c62f01bedccb2bcd73f3e9445bc5a1b1b72211221634c77906f712d7d0b3ecdde2f69

    • SSDEEP

      6144:ZbXE9OiTGfhEClq9Zd6cdURGBFphMn3k/NEXWGHAcRUoCR:hU9XiuiywGFpqn3k/NuVnk

    Score
    8/10
    upx

    • Drops file in Drivers directory

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks