95e2b4306c52212ae960c2617490d11c18669af0dca54b8c6dbe85de1ce92949 | Triage

Submit
Reports

Overview

overview

8

Static

static

95e2b4306c...49.exe

windows7-x64

8

95e2b4306c...49.exe

windows10-2004-x64

8

Sharing

General

Target

95e2b4306c52212ae960c2617490d11c18669af0dca54b8c6dbe85de1ce92949
Size

250KB
Sample

221202-3slegsfc45
MD5

3cec113c886e7c5581b797f3698a33b4
SHA1

6cdba588e6a319285b44c69486bfb1a7ca411969
SHA256

95e2b4306c52212ae960c2617490d11c18669af0dca54b8c6dbe85de1ce92949
SHA512

88ee5cf6e5558738e934a041ed239a1a868cd8cd8fcec0cce04a3099fcff4a3dff473b4555300da7096ce88dcc943223b9f1dee839775b8da92be36c0231a351
SSDEEP

6144:hu2urzh9xu/XkauEvJK8xja9zT8nquk6XfotMq3RV:hutrzh9xOXk/LraAtX

Score

8^/10

persistence upx

Static task

static1

Behavioral task

behavioral1

Sample

95e2b4306c52212ae960c2617490d11c18669af0dca54b8c6dbe85de1ce92949.exe

Resource

win7-20220812-en

persistence upx

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

95e2b4306c52212ae960c2617490d11c18669af0dca54b8c6dbe85de1ce92949.exe

Resource

win10v2004-20220901-en

persistence upx

windows10-2004-x64

14 signatures

150 seconds

Malware Config

Targets

- Target
  
  95e2b4306c52212ae960c2617490d11c18669af0dca54b8c6dbe85de1ce92949
- Size
  
  250KB
- MD5
  
  3cec113c886e7c5581b797f3698a33b4
- SHA1
  
  6cdba588e6a319285b44c69486bfb1a7ca411969
- SHA256
  
  95e2b4306c52212ae960c2617490d11c18669af0dca54b8c6dbe85de1ce92949
- SHA512
  
  88ee5cf6e5558738e934a041ed239a1a868cd8cd8fcec0cce04a3099fcff4a3dff473b4555300da7096ce88dcc943223b9f1dee839775b8da92be36c0231a351
- SSDEEP
  
  6144:hu2urzh9xu/XkauEvJK8xja9zT8nquk6XfotMq3RV:hutrzh9xOXk/LraAtX
Score

8^/10

persistence upx
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy