Overview

overview

8

Static

static

d1f602dc95...cf.exe

windows7-x64

8

d1f602dc95...cf.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d1f602dc95f7c1277165d7d4c3103c5d74c188120fa85794bbde8da8850f65cf

  • Size

    1.5MB

  • Sample

    221130-lyxahaab78

  • MD5

    a2d2674fe920910365ec490c2271837d

  • SHA1

    24281340c82dcfa81f0a56c667ea93048869aeef

  • SHA256

    d1f602dc95f7c1277165d7d4c3103c5d74c188120fa85794bbde8da8850f65cf

  • SHA512

    e97bf4d096f1f4887d7e54c6af407ede8c3b56c0d905200a6017d2c98a360c14730050e34842fa14ecf57bdc73764f3e5d42c229ffa36d366847626b4eebc65a

  • SSDEEP

    24576:Qutr5OUX+0HSNRdylALXlfBwUiRQs3utW65Lu31xneixByVP26L1TC71+jc6onPx:QuX1+jNClCwDus+1tfixByz541+doRXf

Score
8/10
upx

Malware Config

Targets

    • Target

      d1f602dc95f7c1277165d7d4c3103c5d74c188120fa85794bbde8da8850f65cf

    • Size

      1.5MB

    • MD5

      a2d2674fe920910365ec490c2271837d

    • SHA1

      24281340c82dcfa81f0a56c667ea93048869aeef

    • SHA256

      d1f602dc95f7c1277165d7d4c3103c5d74c188120fa85794bbde8da8850f65cf

    • SHA512

      e97bf4d096f1f4887d7e54c6af407ede8c3b56c0d905200a6017d2c98a360c14730050e34842fa14ecf57bdc73764f3e5d42c229ffa36d366847626b4eebc65a

    • SSDEEP

      24576:Qutr5OUX+0HSNRdylALXlfBwUiRQs3utW65Lu31xneixByVP26L1TC71+jc6onPx:QuX1+jNClCwDus+1tfixByz541+doRXf

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks